2516 matches found
The vulnerability of the Event Management Service daemon (emsd) on the Cisco IOS XR operating system allows a hacker to trigger a service failure.
The vulnerability of the Event Management Service daemon emsd on the Cisco IOS XR operating system is related to insufficient validation of input data during gRPC requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted gRPC requests...
CVE-2019-11895
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller SHC before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to...
CVE-2019-11892
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller SHC before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability, the adversary...
CVE-2019-9865
When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service crash or possibly execute arbitrary code...
CVE-2019-3940
Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code...
CVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request...
UBUNTU-CVE-2019-10903
In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...
Dell EMC NetWorker Remote Code Execution Vulnerability
Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting and other features. A security vulnerability exists in the Networker Client execution service nsrexecd in Dell EMC NetWorker....
kernel: net/rxrpc: overflow in decoding of krb5 principal
Keberos 5 tickets being decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation...
PT-2019-10250 · Pulse Secure · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Secure Pulse Connect Secure versions 8.3RX before 8.3R2 Pulse Secure Pulse Connect Secure versions 8.1RX before 8.1R12 Description: A hidden RPC service issue was found. Recommendations: For Pulse Secure Pulse Connect Secure versions...
The vulnerability of the RPC component of the Oracle Solaris operating system, which allows a hacker to trigger a service failure
The vulnerability of the RPC component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service failures using the Portmap v3 service...
The vulnerability in the implementation of the Keberos v5 protocol in the Linux operating system allows a perpetrator to increase their privileges or cause service failures.
The vulnerability in the implementation of the Keberos v5 protocol in the Linux operating system is related to the operation of writing data beyond the buffer in memory when processing RXRPC keys. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service...
The vulnerability of the remote procedure call handler “arpc_Span” in the atlcore_.dll library of the resource management system of the Galaktika ERP system allows a malicious actor to read data from the memory of the server process.
The vulnerability of the process handler for remote procedure calls in the “arpcSpan” module of the atlcore.dll library of the resource management system of the Galaktika ERP system is related to the lack of validation for the correctness of received requests. Exploiting this vulnerability allows...
The vulnerability of the atlcore_.dll library in the enterprise resource management system Galaktika ERP allows a hacker to execute arbitrary code.
The vulnerability of the atlcore.dll library in the enterprise resource management system Galaktika ERP is related to architectural weaknesses in the processing components that handle remote procedure calls. This means that when addresses are transferred between the client and the server, it is...
The vulnerability of the Remote Procedure Call component in the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the Remote Procedure Call component in the Windows operating system is related to errors in the initialization mechanisms for objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...
MGASA-2019-0021 Updated openafs packages fix security vulnerabilities
Jeffrey Altman reported that the backup tape controller butc process does accept incoming RPCs but does not require or allow for authentication of those RPCs, allowing an unauthenticated attacker to perform volume operations with administrator credentials CVE-2018-16947. Mark Vitale reported that...
The RPC vulnerability mining case studies, on-vulnerability and early warning-the black bar safety net
2018 8 the end of the month, a self-proclaimed“sandbox escape”SandboxEscaperof female researchers released a Windows local privilege escalation 0 day vulnerability. In addition, also attach a proof of concept attack that allows hackers to read the system in unauthorized areas, but at the moment...
CVE-2018-8514
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...
CVE-2018-8514
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...
Information disclosure
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...