2274 matches found
CVE-2020-13656
In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...
The vulnerability in the DCE-RPC interaction interface of Siemens’ software and hardware infrastructure allows a perpetrator to trigger a service failure.
The vulnerability of the DCE-RPC interaction interface of Siemens’ software and hardware infrastructure is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2020-13149
Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary...
Microsoft Windows and Windows Server Trust Management Issues Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A trust management issue vulnerability exists in Microsoft Windows and Windows Server, whi...
Logic Flaw Vulnerability in Geth/Parity RPC API for Ethernet Nodes
Geth/Parity is an Ether node agent. The vulnerability stems from an Ethernet node Geth/Parity RPC API authentication flaw, where a malicious call to ethsendTransaction steals tokens. An attacker could use this vulnerability to steal tokens from others...
CVE-2020-11462
An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...
CVE-2020-6867
ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions...
Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2
Memory leak in RPCSS and DcomLaunch services in Windows 8.1 or Windows Serer 2012 R2 This article describes an issue in which memory leak occurs in Windows remote procedure call service RPCSS and DCOM Server Process Launcher DcomLaunch services in Windows 8.1, Windows RT 8.1, or Windows Server 20...
DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012
DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012 This article describes a problem in which DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012. An update is available...
Avast Antivirus Arbitrary File Deletion Vulnerability (CNVD-2020-22013)
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to delete arbitrary files from the Avast...
Avast Antivirus Input Validation Error Vulnerability (CNVD-2020-22015)
Avast Antivirus is a suite of antivirus software from the Czech company Avast. An input validation error vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. An attacker can exploit this vulnerability to shut down the system with a...
Avast Antivirus Encryption Problem Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to enumerate network interfaces and access...
CVE-2020-10868
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to launch the Repair App RPC call from a Low Integrity process...
CVE-2020-10866
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to enumerate the network interfaces and access points from a Low Integrity process via RPC...
CVE-2020-10865
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process...
CVE-2020-10864
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...
CVE-2020-10861
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled...
CVE-2020-10862
An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...
Facebook Thrift has an unspecified vulnerability
Facebook Thrift is a branch of Apache Thrift from Facebook Inc. is a serialization and RPC framework for service communication. A security vulnerability exists in versions prior to Facebook Thrift v2019.12.09.00 Java, which can be exploited by an attacker to cause a denial of service by sending a...