CVE-2017-3271

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters . Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-3271

CVE-2017-3271 describes an arbitrary write/code execution vulnerability in Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The flaw is triggered in the PDF parser by malformed input (notably an /Index entry containing a string instead of a numeric value), allow...

CVE-2015-3271

Apache Tika server aka tika-server in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header...

CVE-2015-3271

Apache Tika server (tika-server) up to v1.9 is vulnerable when used as a web service with untrusted access: a remote attacker can read arbitrary files via the HTTP fileUrl header, causing information disclosure from the server's filesystem. Root cause is the server fetching content from the URL p...

CVE-2016-3271

The CVE-2016-3271 issue is an information-disclosure vulnerability in the VBScript engine used by Microsoft Edge. A remote attacker could obtain sensitive data from process memory by presenting a crafted webpage, via the Edge VBScript component. The root cause is improper handling of memory objec...

Microsoft Scripting Engine Information Disclosure (MS16-085: CVE-2016-3271)

An information disclosure vulnerability exists in Microsoft Edge. The vulnerability is due to the way VBScript improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Microsoft Ed...

KLA10844 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft browsers. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be...

MS16-085: Cumulative Security Update for Microsoft Edge (3169999)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3169999. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly implement Address Space Layout Randomization ASL...

Debian: Security Advisory (DSA-3271-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3271

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149...

CVE-2014-3271

Cisco IOS XR DHCPv6 implementation is vulnerable to denial of service via malformed DHCPv6 packets, causing process crash. Affected: Cisco IOS XR devices configured with DHCPv6 server functionality. Root cause: incorrect handling of malformed DHCPv6 packets. Impact: device crash (DoS). Mitigation...

iLO 3 < 1.50 / iLO 4 < 1.13 Unspecified Information Disclosure

According to its version number, the remote HP Integrated Lights-Out iLO server is affected by an unspecified information disclosure vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69816; scriptversion"1.2"; scriptcvsdate"Date: 2018/07/12 19:01:16";...

CVE-2013-3271

EMC RSA Authentication Agent for PAM 7.0 before 7.0.2.1 enforces the maximum number of login attempts within the PAM-enabled application codebase, instead of within the Agent codebase, which makes it easier for remote attackers to discover correct login credentials via a brute-force attack...

CVE-2013-3271

CVE-2013-3271 affects EMC RSA Authentication Agent for PAM 7.0 and earlier (up to 7.0.2.0) where login-attempt limiting is implemented in the PAM-enabled application code rather than in the RSA Agent itself. This design allows brute-force attempts against login credentials. The issue is documente...

[security bulletin] HPSBHF02821 SSRT100934 rev.1 - HP Integrated Lights-Out iLO3 and iLO4, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03515413 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515413 Version: 1 HPSBHF02821...

CVE-2012-3271

HP iLO3 before 1.50 and iLO4 before 1.13 are affected by an unspecified information-disclosure vulnerability (CVE-2012-3271). Remote attackers could obtain sensitive information via unknown vectors. HP’s security bulletin and multiple vulnerability feeds attribute a CVSS v2 base score of 9.3 (HIG...

CVE-2011-3271

Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...

CVE-2011-3271

Summary : CVE-2011-3271 affects Cisco IOS Smart Install in Catalyst Switches running Cisco IOS 12.2 and 15.1. The root issue is a vulnerability in the Smart Install feature that allows an unauthenticated, remote attacker to execute arbitrary code or cause a device crash by sending crafted TCP pac...

CVE-2010-3271

Multiple cross-site request forgery CSRF vulnerabilities in the Integrated Solutions Console aka administrative console in IBM WebSphere Application Server WAS 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security...

CVE-2010-3271

CVE-2010-3271 : IBM WebSphere Application Server (ISC admin console) is vulnerable to multiple CSRF flaws in 7.0.0.13 and earlier. The issues arise where POST requests to adminSecurityDetail.do (Edit) and then to syncworkspace.do (Save) can be forged to hijack an administrator’s session and disab...