118 matches found
git: Git arbitrary file writes
A bundled uri handling flaw was found in Git. When cloning a repository, Git knows to optionally fetch a bundle advertised by the remote server, which allows the server side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles,...
git: Git arbitrary file writes
A bundled uri handling flaw was found in Git. When cloning a repository, Git knows to optionally fetch a bundle advertised by the remote server, which allows the server side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles,...
gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer bei...
PT-2025-55394
Уязвимость реализации протокола Netlogon Remote Protocol NRPC операционных систем Windows связана с применением фиксированного нулевого вектора инициализации при шифровании данных в режиме AES‑CFB8. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти процедуру...
CVE-2020-11628
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to support restriction of available remote protocols CMP, ACME, REST, etc. through the system configuration. These restrictions can be bypassed by modifying the URI string from a client. EJBCA's internal acces...
Linux Distros Unpatched Vulnerability : CVE-2020-1472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the...
SUSE CVE-2016-0788
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
SUSE CVE-2019-15161
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...
SUSE CVE-2020-29363
An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not...
Netlogon Remote Protocol Privilege Escalation
The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
KB5018478: Windows Server 2012 Security Update (October 2022)
The remote Windows host is missing security update 5018478. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018419: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2022)
The remote Windows host is missing security update 5018419. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
CVE-2022-38045
CVE-2022-38045 affects the Windows Server Service (Windows Server) and is categorized as an Elevation of Privilege vulnerability with a CVSSv3 base score of 8.8 (HIGH). The connected OpenVAS/NCSC entries corroborate that this CVE is associated with Windows components and is listed among Microsoft...
KB5018410: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (October 2022)
The remote Windows host is missing security update 5018410. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018411: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2022)
The remote Windows host is missing security update 5018411. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
GHSA-J7Q5-H445-F7PC Jenkins allows Execution of Code by Opening a JRMP Listener
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener...
CVE-2022-21924
Workstation Service Remote Protocol Security Feature Bypass Vulnerability...
CVE-2022-21913
Local Security Authority Domain Policy Remote Protocol Security Feature Bypass...
