CVE-2017-9065

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...

CVE-2017-9062

In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...

CVE-2017-9065

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...

PT-2017-18681

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.5 Description The issue is related to a lack of capability checks for post meta data in the XML-RPC API. Recommendations For versions prior to 4.7.5, update to version 4.7.5 or later to resolve the issue...

PT-2017-18678

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.5 Description The issue is related to the improper handling of post meta data values in the XML-RPC API. Recommendations For versions prior to 4.7.5, update to version 4.7.5 or later to resolve the issue...

CVE-2017-9065: Improper Input Validation

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...

CVE-2017-9062: Improper Neutralization of Input During Web Page Generation

In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...

WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC

...

WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks

...

Wordpress -- multiple vulnerabilities

WordPress versions 4.7.4 and earlier are affected by six security issues Insufficient redirect validation in the HTTP class. Improper handling of post meta data values in the XML-RPC API. Lack of capability checks for post meta data in the XML-RPC API. A Cross Site Request Forgery CRSF...

WordPress <=4.7.4 - Post Meta Data Values Improper Handling in XML-RPC API

WordPress versions starting from 2.5 to 4.7.4 have the improper handling of post meta data values in the XML-RPC Remote Procedure Call API. Discovered and reported by Sam Thomas. Solution Update WordPress core to the latest possible version at least 4.7.5...

[SECURITY] Fedora 25 Update: rpcbind-0.2.4-5.rc1.fc25

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine...

[SECURITY] Fedora 26 Update: rpcbind-0.2.4-6.rc1.fc26

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine...

Debian DLA-936-1 : libtirpc security update

Guido Vranken discovered that incorrect memory management in libtirpc, a transport-independent RPC library used by rpcbind and other programs may result in denial of service via memory exhaustion depending on memory management settings. For Debian 7 'Wheezy', these problems have been fixed in...

OpenText Documentum Content Server "RPC save-command" elevation vulnerability

OpenText Documentum Content Server is a platform for managing content in a repository and consists of three parts: a content server, a relational database, and a location to store documents. OpenText Documentum Content Server "RPC save-command" has an elevation vulnerability that can be exploited...

CVE-2016-5063

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

Authorization

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

CVE-2016-5063

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...

CVE-2016-5063

CVE-2016-5063 affects the Windows RSCD agent in BMC Server Automation prior to 8.6 SP1 Patch 2 and 8.7 prior to Patch 3. The issue allows remote attackers to bypass authorization and invoke RPC calls via unspecified vectors. Public exploit materials exist (e.g., Exploit-DB 43934) showing Windows ...

PT-2017-8682

Name of the Vulnerable Software and Affected Versions BMC Server Automation versions prior to 8.6 SP1 Patch 2 BMC Server Automation versions prior to 8.7 Patch 3 Description The issue allows remote attackers to bypass authorization checks and make an RPC call. Recommendations For versions prior t...