7676 matches found
CVE-2023-30450
rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...
PT-2023-2507 · Avg +1 · Avg Antivirus +1
Name of the Vulnerable Software and Affected Versions: Avast Antivirus versions prior to 22.11 AVG Antivirus versions prior to 22.11 Description: The issue is related to a NULL pointer dereference problem via the RPC-interface, which could allow an attacker to cause a denial of service. The...
Rocket Software Unidata udadmin_server Stack Buffer Overflow in Password
This modlue exploits an authentication bypass vulnerability in the Linux version of udadminserver, which is an RPC service that comes with the Rocket Software UniData server, which runs as root. This vulnerability affects UniData versions 8.2.4 build 3003 and earlier for Linux, but this module...
Rocket Software Unidata udadmin_server Authentication Bypass
This module exploits an authentication bypass vulnerability in the Linux version of udadminserver, which is an RPC service that comes with the Rocket Software UniData server. This affects versions of UniData prior to 8.2.4 build 3003. This service typically runs as root. It accepts a username of...
Microsoft Patch Tuesday March 2023: Outlook EoP, MOTW Bypass, Excel DoS, HTTP/3 RCE, ICMP RCE, RPC RCE
Hello everyone! This episode will be about Microsoft Patch Tuesday for March 2023, including vulnerabilities that were added between February and March Patch Tuesdays. Alternative video link for Russia: As usual, I use my open source Vulristics project to analyse and prioritize vulnerabilities. I...
NonceHolder.setValueUnderNonce does not increase the minNonce when using sequential account nonce ordering
Lines of code Vulnerability details Impact The current available nonce can't be synchronized to the client and rpc resp in real time. As a result, the client can't use the correct nonce to signature transaction. Proof of Concept If the nonceOrdering type of the account is...
CVE-2023-23405 Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
CVE-2023-21708
Technical details for CVE-2023-21708 are not publicly provided in the supplied documents. No confirmed affected products, versions, or remediation are given here. Monitor for updates.
KB5023764: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (March 2023)
The remote Windows host is missing security update 5023764. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...
KB5023752: Windows Server 2012 Security Update (March 2023)
The remote Windows host is missing security update 5023752. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...
KLA48554 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...
KB5023754: Windows Server 2008 Security Update (March 2023)
The remote Windows host is missing security update 5023754. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...
Apache Dubbo code issue vulnerability (CNVD-2023-23551)
Apache Dubbo is a lightweight Java-based RPC remote procedure call framework from the Apache Foundation in the United States. The product provides interface-based remote calling, fault tolerance and load balancing, and automatic service registration and discovery.A security vulnerability exists i...
Apache Spark < 2.4.6 RCE (CVE-2020-9480)
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...
CentOS 7 : samba (RHSA-2023:1090)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1090 advisory. - Netlogon RPC Elevation of Privilege Vulnerability CVE-2022-38023 Note that Nessus has not tested for this issue but has instead relied only on the application...
Ubuntu 20.04 LTS : Samba vulnerabilities (USN-5936-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5936-1 advisory. Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue t...
Debian: Security Advisory (DSA-2018-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
LSN-0092-1: Kernel Live Patch Security Notice
Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service system crash or execute arbitrary code.CVE-2022-4378 Tamás Koczka discovered that the Bluetooth L2CAP handshake...
Oracle Linux 7 : samba (ELSA-2023-1090)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1090 advisory. - related: 2154364 - Add additional patches for CVE-2022-38023 Tenable has extracted the preceding description block directly from the Oracle Linux security...
