Microsoft Windows Multiple Vulnerabilities (KB5025234)

This host is missing a critical security update according to Microsoft KB5025234 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-28297

Windows Remote Procedure Call Service RPCSS Elevation of Privilege Vulnerability...

CVE-2023-28268

Netlogon RPC Elevation of Privilege Vulnerability...

CVE-2023-21729

Remote Procedure Call Runtime Information Disclosure Vulnerability...

Privilege escalation

Netlogon RPC Elevation of Privilege Vulnerability...

CVE-2023-28268

Technical details for CVE-2023-28268 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are present. Monitor for updates in connected sources for any concrete information.

CVE-2023-28268 Netlogon RPC Elevation of Privilege Vulnerability

...

CVE-2023-21729 Remote Procedure Call Runtime Information Disclosure Vulnerability

...

CVE-2023-21727 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2023-21727

Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.

Netlogon RPC Elevation of Privilege Vulnerability

...

Microsoft Windows RPC API security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RPC API. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...

Microsoft Windows RPC API security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RPC API. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...

CVE-2023-28268: Undefined Security Weakness

Netlogon RPC Elevation of Privilege Vulnerability...

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

Code injection

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

CVE-2023-30450

The CVE-2023-30450 issue affects Redpanda before 23.1.2, where the rpk tool mishandles the redpanda.rpc_server_tls field, causing a data type mismatch that cannot be auto-fixed by rpk. remediation requires user action: reconfigure TLS on broker RPC ports while the cluster is turned off. The vulne...

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

PT-2023-2507 · Avg +1 · Avg Antivirus +1

Name of the Vulnerable Software and Affected Versions: Avast Antivirus versions prior to 22.11 AVG Antivirus versions prior to 22.11 Description: The issue is related to a NULL pointer dereference problem via the RPC-interface, which could allow an attacker to cause a denial of service. The...