PT-2021-19483

Name of the Vulnerable Software and Affected Versions Akuvox C315 version 115.116.2613 Description The issue allows remote command injection via the cfgd server service. The attack vector involves sending a payload to port 189, which is configured to listen on all IP addresses by default 0.0.0.0...

Description of the security update for Power BI Report Server (October 2020): March 9, 2021 (KB5001285)

Description of the security update for Power BI Report Server October 2020: March 9, 2021 KB5001285 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability cou...

Start disabled Server Service during the scan (WMI)

Binary data wmistartserversvc.nbin...

Stop the Server Service after the scan (WMI)

Binary data wmistopserversvc.nbin...

IBM Spectrum Protect Plus Hardcoded Username And Password Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of IBM Spectrum Protect Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the Discovery Server service. The product...

PT-2020-2394

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description The issue is related to errors in handling input data in the DNS server service of Windows Server operating systems. It can be exploited by a remote attacker to cause a denial of...

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services is a server-based reporting platform. A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services. An attacker could exploit the vulnerability to execute code in the context of a Reporting Server service account...

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...

CVE-2019-19119

An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...

PT-2020-10056

Name of the Vulnerable Software and Affected Versions PRTG versions 7.x through 19.4.53 Description The issue is related to insufficient access control on local registry keys for the Core Server Service. This allows a non-administrative user on the local machine to access administrative...

CVE-2019-19119: Insufficiently Protected Credentials

An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...

CVE-2009-1120: Undefined Security Weakness

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the repsrv.exe process- where the vulnerability is caused by an error when the repsrv.exe handles a specially crafted packet sen...

PT-2020-7058

Name of the Vulnerable Software and Affected Versions EMC RepliStor Server Service versions before ESA-09-003 Description The issue is caused by an error when the rep srv.exe process handles a specially crafted packet sent by an unauthenticated attacker. This flaw exists within the DoRcvRpcCall R...

PT-2019-11645

Name of the Vulnerable Software and Affected Versions: MailStore Server versions 9.x through 11.x before 11.2.2 MailStore Server Service Provider Edition versions 9.x through 11.x before 11.2.2 Description: An issue allows an attacker to login as an existing user with an arbitrary password on the...

CVE-2018-19629: Improper Input Validation

A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection...

CVE-2019-12323

The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS...

April 9, 2019—KB4493458 (Security-only update)

None None...

March 12, 2019—KB4489878 (Monthly Rollup)

None None...

CVE-2018-19203

PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request...

CVE-2018-19203: Undefined Security Weakness

PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request...