126 matches found
SUSE CVE-2011-2376
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
CVE-2022-2376
creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:11+00:00| seen| https://t.me/cibsecurity/49285 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-28 00:00:00+00:00| exploited| The Shadowserver...
CVE-2022-2376 Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users...
CVE-2022-2376 Directorist < 7.3.1 - Unauthenticated Email Address Disclosure
The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticated users...
CVE-2022-2376
The CVE-2022-2376 entry concerns the WordPress Directorist plugin, where versions prior to 7.3.1 disclose the email address of all users in an AJAX action accessible to both unauthenticated and authenticated users. This information disclosure is the described vulnerability vector and impact in co...
CVE-2021-2376
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
CVE-2021-2376
CVE-2021-2376 affects Oracle WebLogic Server (Web Services component) on 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated network access via T3/IIOP to compromise the server, potentially causing a hang or crash (DoS). The CVSS v3.1 base score...
Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2387)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2650)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-2376
CVE-2018-2376 affects SAP HANA Extended Application Services 1.0. a controller user with SpaceAuditor authorization in a specific space could retrieve application environments within that space. No exploitation details are provided in the documents; remediation guidance (from PT-2018-15509) sugge...
Pidgin MXIT read stage 0x3 Code Execution Vulnerability(CVE-2016-2376)
DESCRIPTION A buffer overflows vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size...
CVE-2017-2376
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page...
CVE-2017-2376
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page...
CVE-2017-2376
The CVE-2017-2376 entry affects Safari/WebKit on Apple devices: iOS prior to 10.3 and Safari prior to 10.1 are vulnerable to address-bar spoofing by leveraging text input during page load. The underlying issue is in Safari/WebKit handling during page loading that enables spoofing of the address b...
CVE-2016-2376
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...
CVE-2016-2376
CVE-2016-2376 — Pidgin MXIT buffer overflow : A vulnerability in the MXIT protocol handling in Pidgin could be triggered by specially crafted MXIT data from a server, potentially causing arbitrary code execution due to a buffer overflow. The initial description notes an invalid packet size as the...
[SECURITY] [DSA 3620-1] pidgin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3620-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...
CVE-2016-2376
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet...
Pidgin MXIT read stage 0x3 Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0118 Pidgin MXIT read stage 0x3 Code Execution Vulnerability June 21, 2016 CVE Number CVE-2016-2376 DESCRIPTION A buffer overflows vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could...