14674 matches found
PT-2021-1820 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call RPC runtime environment. This allows a remote attacker to execute arbitrary code on the system. The...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows Server "Remote Procedure Ca...
KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
PT-2021-1594 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. This allows a remote attacker to execute arbitrary code. The estimated...
PT-2021-1687 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the system. Recommendations: At t...
PT-2021-1808 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system's Remote Procedure Call RPC runtime environment. This can be exploited by a remote attacker to execute...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...
PT-2021-1562 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...
Microsoft Windows Remote Procedure Call Runtime 安全漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...
Updated cherokee packages fix security vulnerability
Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a malformed Authorization header that is mishandled during a cherokeebufferadd call with...
CVE-2020-36178
oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...
CVE-2020-36178
oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...
Denial Of Service (DoS)
github.com/tidwall/gjson is vulnerable to denial of service. An attacker is able to crash the application via a malicious GET call which would result in a slice bounds out of range...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
