CVE-2018-3274

CVE-2018-3274 affects Oracle Solaris 11.3, specifically the Kernel subcomponent of the Solaris module in Oracle Sun Systems Products Suite. The vulnerability is exploitable via network access using SMB by a low-privileged attacker and requires user interaction from the target user. Successful exp...

Ubuntu 14.04 LTS / 16.04 LTS : ICU vulnerabilities (USN-3274-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3274-1 advisory. It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted...

CVE-2017-3274

CVE-2017-3274 affects Oracle Email Center (User Interface subcomponent) in Oracle E-Business Suite. Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows unauthenticated, network-accessible HTTP access to Oracle Email Center with user interaction required for exploita...

CVE-2016-3274

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...

CVE-2016-3274

CVE-2016-3274 affects Microsoft Internet Explorer 9–11 and Microsoft Edge and describes a content-spoofing vulnerability where crafted URLs can mislead users. The root cause is how browsers parse HTTP content, allowing a remote attacker to redirect users to a spoofed site via a specially crafted ...

MS16-085: Cumulative Security Update for Microsoft Edge (3169999)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3169999. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly implement Address Space Layout Randomization ASL...

KLA10844 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft browsers. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be...

CVE-2015-3274

Cross-site scripting XSS vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformattext call in ...

CVE-2015-3274

The CVE covers a cross-site scripting (XSS) vulnerability in Moodle identified as CVE-2015-3274. The issue resides in the user_get_user_details function in user/lib.php and is exploitable via web services due to the absence of an external_format_text call. Affected Moodle versions are: 2.6.11 and...

Fedora 21 : moodle-2.7.9-1.fc21 (2015-14996)

moodle-2.7.9-1.fc21 - 2.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : moodle-2.8.7-1.fc22 (2015-14988)

moodle-2.8.7-1.fc22 - Latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-15-0026: Possible phishing when redirecting to external site using referer header. CVE-2015-3272 MSA-15-0027: Capability 'mod/forum:canposttomygroups' is not respected when using 'Post a copy to all groups' in forum CVE-2015-3273 MSA-15-0028: Possible XSS through custom...

Debian DSA-3274-1 : virtualbox - security update (Venom)

Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in potential privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3274. The text...

Solaris <= 8.0 - LPD Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2013-3274

EMC Avamar Server and Avamar Virtual Edition before version 7.0 on Data Store Gen3, Gen4, and Gen4s hardware are affected by CVE-2013-3274 due to improper authorization checks on Java RMI calls. This potentially allows remote authenticated users to execute arbitrary code via unspecified vectors. ...

CVE-2012-3274

HP IMC UAM (uam.exe) is affected by a stack-based buffer overflow in the UDP data path for log handling, prior to IMC 5.1 E0101P01. The issue can allow remote code execution via specially crafted datagrams, with public references describing exploitation over UDP port 1811 and a patch-based remedi...

CVE-2012-3274

creationtimestamp| type| source ---|---|--- 2012-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41710 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hpimcuam.rb 2025-02-06 03:13:40+00:00| seen|...

HP Intelligent Management Center < 5.0 E0102 - UAM Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'HP Intelligent Management Center UAM Buffer Overflow', 'Description' = %q This module exploits a remote buffer overflow in HP...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the 1 searchType and 2 searchString parameters, a different vulnerability than CVE-2010-3274...

CVE-2011-3274

CVE-2011-3274 describes two IPv6-over-MPLS DoS vulnerabilities in Cisco IOS/IOS XE where crafted IPv6 packets (or ICMPv6 packets) can cause a reload of MPLS-configured devices, resulting in a denial of service. Affected products include Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, 15.1, and IOS X...