9692 matches found
CVE-2018-6963: NULL Pointer Dereference
VMware Workstation 14.x before 14.1.2 and Fusion 10.x before 10.1.2 contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine...
PT-2018-17843
Name of the Vulnerable Software and Affected Versions VMware Workstation versions 14.x before 14.1.2 VMware Fusion versions 10.x before 10.1.2 Description The issue is related to NULL pointer dereference problems in the RPC handler, which can lead to denial-of-service conditions. An attacker with...
Updated transmission packages fix a security vulnerability
Updated transmission packages fix security vulnerability: Tavis Ormandy discovered a vulnerability in the Transmission BitTorrent client; insecure RPC handling between the Transmission daemon and the client interfaces may result in the execution of arbitrary code if a user visits a malicious...
WordPress XML-RPC Interface Detected
A public facing WordPress XML-RPC interface has been detected. An attacker may be able to launch attacks against the web server Via XML-RPC including: - Login into WordPress backend Administrative interface - Brute force user credentials - Use pingbacks for scanning or fingerprinting for example ...
Quest NetVault Backup NVBUBackup Count Method SQL Injection (CVE-2017-17652)
An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoking the Count method of the NVBUBackup class...
Quest NetVault Backup NVBUEventHistory Get Method SQL Injection (CVE-2017-17412)
An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoking the Get method of the NVBUEventHistory class...
CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
Design/Logic Flaw
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
CVE-2018-4832
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
CVE-2018-4832: Improper Input Validation
A vulnerability has been identified in OpenPCS 7 V7.1 and earlier All versions, OpenPCS 7 V8.0 All versions, OpenPCS 7 V8.1 All versions V8.1 Upd5, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd1, SIMATIC BATCH V7.1 and earlier All versions, SIMATIC BATCH V8.0 All versions V8.0...
Release notes for Windows Server 2003 Service Pack 1
Includes the release notes for Windows Server 2003 Service Pack 1.INTRODUCTIONThis article includes the release notes for Microsoft Windows Server 2003 Service Pack 1 SP1.More InformationThe release notes that are included in this article address late-breaking issues that were not addressed in th...
Code injection
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2718
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
CVE-2018-2718
CVE-2018-2718 affects the Solaris component of Oracle Sun Systems Product Suite (RPC). Affected: Solaris 10 and 11.3. Vulnerability allows an unauthenticated attacker who can access the host over NFS to cause a hang or a frequently repeatable crash (complete DoS). CVSS 3.0 base score 7.5 (Availab...
CVE-2018-2718: Undefined Security Weakness
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Solaris 10 (sparc) : 152260-04
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Solaris 10 (x86) : 152261-04
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Updated samba packages fix security vulnerabilities
It was discovered that Samba is prone to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon CVE-2018-1050. Bjoern Baumbach from Sernet discovered that on Samba 4 AD DC the LDAP server incorrectly validates permissions to modify passwords over LDA...
MS10-106: Microsoft Exchange Server Denial of Service (uncredentialed)
The version of Microsoft Exchange 2007 running on the remote host is affected by a denial of service vulnerability. The Exchange service does not process specially crafted RPC calls correctly, resulting in an infinite loop. A remote, authenticated attacker could exploit this by making a specially...