111 matches found
gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer bei...
CVE-2020-11628
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to support restriction of available remote protocols CMP, ACME, REST, etc. through the system configuration. These restrictions can be bypassed by modifying the URI string from a client. EJBCA's internal acces...
Linux Distros Unpatched Vulnerability : CVE-2020-1472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the...
SUSE CVE-2016-0788
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
SUSE CVE-2019-15161
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...
SUSE CVE-2020-29363
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...
The vulnerability of the Netlogon Remote Protocol (MS-NRPC) implementation in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2022-38045
CVE-2022-38045 affects the Windows Server Service (Windows Server) and is categorized as an Elevation of Privilege vulnerability with a CVSSv3 base score of 8.8 (HIGH). The connected OpenVAS/NCSC entries corroborate that this CVE is associated with Windows components and is listed among Microsoft...
KB5018419: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2022)
The remote Windows host is missing security update 5018419. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018410: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (October 2022)
The remote Windows host is missing security update 5018410. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018478: Windows Server 2012 Security Update (October 2022)
The remote Windows host is missing security update 5018478. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018411: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2022)
The remote Windows host is missing security update 5018411. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
GHSA-J7Q5-H445-F7PC Jenkins allows Execution of Code by Opening a JRMP Listener
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
CVE-2022-21925
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...
CVE-2022-21913
Local Security Authority Domain Policy Remote Protocol Security Feature Bypass...
CVE-2022-21925
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...
CVE-2022-21925
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...
CVE-2022-21913
Local Security Authority Domain Policy Remote Protocol Security Feature Bypass...