14671 matches found
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
PT-2023-1778 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system. Recommendations: At the momen...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected: Windows...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows 10...
KB5023702: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2023)
The remote Windows host is missing security update 5023702. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
KB5023696: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (March 2023)
The remote Windows host is missing security update 5023696. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
KB5023705: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2023)
The remote Windows host is missing security update 5023705. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
KB5023706: Windows 11 version 22H2 Security Update (March 2023)
The remote Windows host is missing security update 5023706. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
PT-2023-1773 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Procedure Call Runtime of Windows operating systems. This allows a remote attacker to execute arbitrary code. Recommendations: A...
PT-2023-1774 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code and affect the system. Recommendations: At t...
KB5023759: Windows Server 2008 R2 Security Update (March 2023)
The remote Windows host is missing security update 5023759. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...
PT-2023-1772 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue exists due to insufficient input validation in the Procedure Call Runtime of Windows operating systems. This allows a remote attacker to execute arbitrary code. Recommendation...
KLA48553 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...
KB5023697: Windows 10 Version 1607 and Windows Server 2016 Security Update (March 2023)
The remote Windows host is missing security update 5023697. It is, therefore, affected by multiple vulnerabilities - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An...
CVE-2022-33256
Memory corruption due to improper validation of array index in Multi-mode call processor...
Memory corruption
Memory corruption due to improper validation of array index in Multi-mode call processor...
No data validation, will result in all funds from the DAO contract stolen
Lines of code Vulnerability details Impact The vulnerability relies on the proposal creation function which forwards the proposal once accepted for the DAO contract to execute. Each proposal has a set of actions attached. struct Action address to; uint256 value; bytes data; function createProposa...
Malicious member can steal funds from the DAO contract.
Lines of code Vulnerability details Impact The malicious member can steal assets from DAO protocol. Proof of Concept The protocol allows the member to have the voting power to create a proposal createProposal. Where the action struct in the parameter refers to be consumed by the DAO's execute...