April 17, 2018—KB4093121 (Preview of Monthly Rollup)

None None...

Twonky Server Directory Traversal Vulnerability

Twonky Server is the industry-leading DLNA/UPnP media server from Lynx Technology that enables the sharing of media content between connected devices. A directory traversal vulnerability exists in Twonky Server. A remote attacker could use the contentbase parameter of rpc/setall in the ... double...

PT-2018-1119 · Siemens · Simatic Route Control +7

Name of the Vulnerable Software and Affected Versions: OpenPCS 7 versions V7.1 through V8.2, V9.0 through V9.0 Upd1 SIMATIC BATCH versions V7.1 through V8.2, V9.0 through V9.0 SP1 SIMATIC NET PC Software versions V14 through V14 SP1 Update 14, V15 through 15 SP1 SIMATIC PCS 7 versions V7.1 throug...

The vulnerability of the Samba networking communication package lies in the lack of input data validation, which allows attackers to trigger a service failure.

The vulnerability of the Samba networking communication package is related to the lack of input data validation during RPC spoolss calls if RPC spoolss is configured to run as an external daemon. Exploiting this vulnerability allows a malicious actor to cause a failure in the print queue manager’...

AZL-7345 CVE-2018-1050 affecting package samba for versions less than 4.12.5-6

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

Electrum Technologies GmbH Electrum Bitcoin Wallet Information Disclosure Vulnerability

Electrum Technologies GmbH Electrum Bitcoin Wallet is a lightweight bitcoin wallet software. A security vulnerability exists in the JSONRPC interface in Electrum Technologies GmbH Electrum Bitcoin Wallet versions prior to 3.0.5. An attacker could exploit this vulnerability to steal bitcoins...

UBUNTU-CVE-2018-7333

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size...

eQ-3 AG HomeMatic CCU2 Open XML-RPC Port Vulnerability

The eQ-3 AG Homematic CCU2 is a central control unit for controlling smart home devices from eQ-3 Germany. A security vulnerability exists in the eQ-3 AG HomeMatic CCU2 version 2.29.22. An attacker can exploit the vulnerability by sending arbitrary XML-RPC requests to control attached BidCos...

Quest NetVault Backup checksession authentication bypass vulnerability

Quest NetVault Backup is a scalable data backup and recovery solution for organizations with multiple IT environments. A checksession authentication bypass vulnerability exists in JSON RPC Request handling in Quest NetVault Backup 11.2.0.13. An attacker can exploit this vulnerability to execute...

PT-2018-5358 · Ethereum · Cpp-Ethereum

Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An improper authorization issue exists in the miner start API endpoint of cpp-ethereum's JSON-RPC. This allows a JSON request to access restricted functionality, resulting in...

PT-2018-5355 · Ethereum · Cpp-Ethereum

Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An issue exists in the admin peers API of cpp-ethereum's JSON-RPC, where a JSON request can bypass authorization, allowing access to restricted functionality. An attacker can...

January 18, 2018—KB4073291 (OS Build 16299.201)

None None...

USN-3533-1 transmission vulnerability

It was discovered that Transmission incorrectly handled certain POST requests to the RPC server and allowed DNS rebinding attack. An attacker could possibly use this issue to execute arbitrary code...

CPP-Ethereum JSON-RPC Denial of Service Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol.APIs are the interfaces. A denial of service vulnerability exists in the APIs for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Security Bypass Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A security bypass vulnerability exists in the adminaddPeer API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02799)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minerstart API for JSON-RPC in CPP-Ethereum commit version...

Parity Ethereum client JSON-RPC misconfiguration vulnerability

Parity Ethereum client is a client for Ethereum the application runtime platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A misconfiguration vulnerability exists in JSON-RPC in Parity Ethereum client version 1.7.8. An attacker can use this vulnerability to sen...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02797)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetEtherbase API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02796)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the adminpeers API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02798)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetGasPrice API for JSON-RPC in the CPP-Ethereum commit...