BMC Software BladeLogic Server Automation Suite RSCD Agent Password Reset Vulnerability

BMC Software BladeLogic Server Automation Suite is a solution for managing the lifecycle of servers and applications from BMC Software, USA. A password reset vulnerability exists in the RSCD Agent of the BMC Software BladeLogic Server Automation Suite for Linux and Unix platforms. A remote attack...

BMC Software BladeLogic Server Automation Suite RSCD Agent Information Disclosure Vulnerability

BMC Software BladeLogic Server Automation Suite is a solution for managing the lifecycle of servers and applications from BMC Software, USA. An information disclosure vulnerability exists in the RSCD Agent of the BMC Software BladeLogic Server Automation Suite for Linux and Unix platforms. A remo...

Drupal Core Violence Amplification Attack Vulnerability

Drupal is a free and open source content management system developed in PHP. A brute force amplification attack vulnerability exists in Drupal Core.The XML-RPC system allows a large number of calls to the same method to be done once, which can be used as a factor in favor in a brute force attack...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the Kernel software for remote monitoring of Advantech WebAccess is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using a specially crafted RPC request...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to trigger a service failure.

The vulnerability of the BwpAlarm subsystem in the Advantech WebAccess remote monitoring software is caused by a buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure through a specially crafted RPC request...

The vulnerability of the Solaris operating system, which allows a perpetrator to cause partial service interruption

The vulnerability of the Solaris operating system’s RPC subsystem is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions by invoking remote procedures...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s RPC implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges by using a specially crafted application...

Unspecified vulnerability in Solaris RPC component

Solaris is a unix-based operating system. An unspecified vulnerability exists in the RPC component within Solaris, which allows remote attackers to exploit the vulnerability to launch denial-of-service attacks...

CVE-2016-0535

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to RPC...

Advantech WebAccess Integer Overflow Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. An integer overflow vulnerability exists in the Kernel service of Advantech WebAccess...

CVE-2016-0860

Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request...

CVE-2016-0859

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service stack-based buffer overflow via a crafted RPC request...

PT-2016-1107

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.6.x through 8.0 before 8.0.121.0 Cisco Wireless LAN Controller versions 8.1 before 8.1.131.0 Description The issue is related to weaknesses in the authentication procedure of the Cisco wireless LAN...

EMC NetWorker RPC Authentication Message Handling Remote Denial of Service Vulnerability

EMC NetWorker is an application that supports disk backup, data replication, continuous data protection and deduplication. A security vulnerability in the EMC NetWorker RPC authentication messages allows remote attackers to exploit the vulnerability to submit a special request to cause the...

Correction: BMC-2015-0005: File inclusion vulnerability caused by misconfiguration of "BIRT Viewer" servlet as used in BMC Remedy AR Reporting

Enigmail: ????? ????? ????????? ?? ???? ??????????? ??? ????????? Errata: This is a correction of our previous disclosure email from September 23rd, 2015. Our previous posting implied that the security vulnerability we discovered was in the "BIRT Viewer" servlet itself. This is NOT the case, but...

kmod, kvm security update

CentOS Errata and Security Advisory CESA-2015:1925 Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...

Microsoft Windows Kernel - DeferWindowPos Use-After-Free (MS15-073)

Microsoft Windows Kernel - DeferWindowPos Use-After-Free MS15-073 Source: https://code.google.com/p/google-security-research/issues/detail?id=339 The attached PoC demonstrate a use-after-free condition that occurs when operating on a DeferWindowPos object from multiple threads. The DeferWindowPos...

Adobe LiveCycle Data Services Information Disclosure Vulnerability

Adobe LiveCycle Data Services is the United States Odo than Adobe company's set of application servers deployed on and integrated with RIA applications and J2EE and other enterprise applications server software. The software provides remote procedure call RPC services, messaging services and data...

OpenAFS Denial of Service Vulnerability (CNVD-2015-05292)

OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in the pioctl support for the OSD FS command in IBM OpenAFS 1.6.12 and earlier versions, which stems from a program writing the result of an RPC...

OpenAFS 'bos' Command Spoofing Vulnerability

OpenAFS is an open source distributed file system that allows sharing of files and resources between systems over local and wide area networks. A security vulnerability exists in OpenAFS 1.6.12 and earlier versions. An attacker can exploit the vulnerability to forge RPC commands in a network...