PT-2021-2616 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Procedure Call Runtime component of Microsoft Windows operating systems. This allows a remote attacker to execu...

The vulnerability of DCE/RPC DNS software for communicating with Samba network drives relates to default access rights settings, allowing a perpetrator to cause service failure.

The vulnerability of the DCE/RPC DNS software component for communicating with Samba network drives is related to an error in the RPC dnsserver communication channel, which allows for changes to DNS records and zones. Exploiting this vulnerability can enable a remote attacker to cause service...

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system, related to a lack of privilege management mechanisms, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

General procedure for xenserver/citrix hypervisor upgrade

General procedure for xenserver/citrix hypervisor upgrade...

UBUNTU-CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from fastrpc.c not preventing user applications from sending kernel RPC messages. No details of the vulnerability...

NewStart CGSL CORE 5.04 / MAIN 5.04 : mariadb Multiple Vulnerabilities (NS-SA-2021-0023)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mariadb packages installed that are affected by multiple vulnerabilities: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.6.47 and prior, 5.7.29...

Ryuk Ransomware: Now with Worming Self-Propagation

A new version of the Ryuk ransomware is capable of worm-like self-propagation within a local network, researchers have found. The variant first emerged in Windows-focused campaigns earlier in 2021, according to the French National Agency for the Security of Information Systems ANSSI. The agency...

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability...

CVE-2021-1734

Windows Remote Procedure Call Information Disclosure Vulnerability...

CVE-2021-1734 Windows Remote Procedure Call Information Disclosure Vulnerability

...

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of the Remote Procedure Call technology in Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

CVE-2020-4956

IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to be set and dumped to a file. By setting a grossly large cache value and dumping that cached value to a file multiple times, a remote attacker could exploit...

CVE-2021-23876

Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware...

CVE-2021-23876

Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware...

CVE-2021-23876

CVE-2021-23876 affects McAfee Total Protection (MTP) prior to version 16.0.30. The vulnerability is a local bypass of Remote Procedure Call that allows a local user to gain SYSTEM privileges and perform arbitrary file modifications, potentially causing denial of service via malware execution. Evi...

CVE-2021-23876 McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability

Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware...

Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs

Microsoft on Tuesday issued fixes for 56 flaws, including a critical vulnerability that's known to be actively exploited in the wild. In all, 11 are listed as Critical, 43 are listed as Important, and two are listed as Moderate in severity — six of which are previously disclosed vulnerabilities...

Microsoft Windows Multiple Vulnerabilities (KB4601331)

This host is missing a critical security update according to Microsoft KB4601331 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601315)

This host is missing a critical security update according to Microsoft KB4601315 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...