CVE-2021-1666: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

PT-2021-1597 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the system. Recommendations: At t...

CVE-2021-1664: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

CVE-2021-1702: Improper Privilege Management

Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability...

CVE-2021-1701: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-1667: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-1700: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

PT-2021-1808 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system's Remote Procedure Call RPC runtime environment. This can be exploited by a remote attacker to execute...

PT-2021-1594 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. This allows a remote attacker to execute arbitrary code. The estimated...

PT-2021-1562 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system's Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

CVE-2021-1671: Undefined Security Weakness

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

PT-2021-1570 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Remote Procedure Call Runtime. It is associated with insufficient access restrictions. Exploitation of this...

Updated kdeconnect-kde packages improve security

For the pairing procedure, the GUI component only presented the friendly 'deviceName' to identify peer devices, which is completely under attacker control. Furthermore the 'deviceName' is transmitted in cleartext in UDP broadcast messages for all other nodes in the network segment to see. Therefo...

PT-2020-22816

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns a pairing procedure where a GUI component presents a deviceName to identify peer devices. This deviceName is under attacker control and is transmitted in cleartext...

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.

...

An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.

...

mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...