CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

UBUNTU-CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0380

Upstream security update. Follow RHBA-2017-0380 for details...

CVE-2016-0380

IBM Sterling Connect:Direct for UNIX creates destination files with permissions 0664 by default, potentially allowing local users to read sensitive data. Affected versions are 4.1.0 prior to 4.1.0.4 iFix073 and 4.2.0 prior to 4.2.0.4 iFix003. The vendor provides fixes: 4.1.0.4 iFix073 and 4.2.0.4...

CVE-2015-0380

Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill...

CVE-2015-0380

CVE-2015-0380 is listed among fixes in the Oracle E-Business Suite January 2015 CPU, affecting the Oracle Telecommunications Billing Integrator component (OA Based UI for Bill Summary) across multiple 11.5.x/12.x versions. The connected documents do not provide the exact root cause, exploit detai...

CVE-2014-0380

CVE-2014-0380 affects Oracle PeopleSoft’s PeopleTools in PeopleSoft Products 8.52/8.53. The issue is an unspecified vulnerability in the MultiChannel Framework (MCF) that could let remote attackers impact integrity. The NVD entry provides no explicit root-cause details beyond the MCF vector, and ...

CVE-2013-0380

CVE-2013-0380 affects Oracle E-Business Suite Payroll component across versions 11.5.10.2, 12.0.6, 12.1.1–12.1.3. The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors related to View Payslip. The available documents do not specify the r...

CVE-2010-0380

The CVE-2010-0380 entry concerns JCE-Tech PHP Calendars (install.php) where a direct request can bypass access restrictions and allow modification of application settings. The vulnerability hinges on administrators not following recommendations in the product installation documentation. The provi...

CVE-2010-0380

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation...

CVE-2009-0380

CVE-2009-0380 concerns the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) for Joomla!/Mambo. The initial description states a SQL injection path via the bid parameter in a showbiz action to index.php (RC 2.8.2), with a separate note that CVE disputes this issue because neither “showbiz” nor “b...

CVE-2008-0380

CVE-2008-0380 affects the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29). The vulnerability is a buffer overflow triggered by a long MP4Prefix property, allowing remote attackers to execute arbitrary code. The exploit is described in multiple sources as a ...

CVE-2007-0380

CVE-2007-0380 affects DocMan 1.3 RC2. The vulnerability allows remote attackers to obtain sensitive information (the full path) via unspecified vectors. The NVD entry and related records confirm a remote information-disclosure issue with a CVSS v2 base score of 5.0 (Medium) and a network attack v...

FreeBSD多个本地内存泄露漏洞

BUGTRAQ ID: 16373 CVECAN ID: CVE-2006-0379,CVE-2006-0380 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码的Unix类系统。 FreeBSD的内核实现上存在多个漏洞，可能导致向非授权用户泄露内核内存信息。 一个漏洞是由于内核向用户态缓冲区复制数据时没有正确地清除原有内容，另一个漏洞是由于向用户缓冲区复制了过多的数据。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD 6.0-RELEASE FreeBSD FreeBSD 5.4-RELENG FreeBSD FreeBSD...

FreeBSD Security Advisory FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

CVE-2006-0380

FreeBSD CVE-2006-0380 (and CVE-2006-0379) affects 5.4-STABLE and 6.0 kernels. A logic error in computing a buffer length can copy too much data to userland, potentially disclosing portions of kernel memory. Impact is local memory disclosure; no workaround is listed in the advisory. Mitigation: up...

FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

FreeBSD -- Local kernel memory disclosure

Problem description: A buffer allocated from the kernel stack may not be completely initialized before being copied to userland. CVE-2006-0379 A logic error in computing a buffer length may allow too much data to be copied into userland. CVE-2006-0380 Impact: Portions of kernel memory may be...

CVE-2005-0380

CVE-2005-0380 affects Zeroboard <= 4.1pl5, where multiple PHP scripts (print_category.php, login.php, setup.php, ask_password.php, error.php) allow remote file inclusion via the dir parameter, enabling remote PHP code execution and potential file disclosure. OpenVAS notes Zeroboard