CVE-2022-3297 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0579...

CVE-2022-3297 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0579...

CVE-2022-3297

CVE-2022-3297 affects Vim. The issue is a Use After Free in vim/vim prior to 9.0.0579 that can lead to a crash or code execution on memory handling during certain operations. Remediation per connected documents is to upgrade Vim to a fixed version (e.g., 9.0.0579 or newer; some advisories referen...

Mageia: Security Advisory (MGASA-2018-0437)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:3297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3297

creationtimestamp| type| source ---|---|--- 2021-04-11 13:02:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3099 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/77 2025-08-21 21:02:33+00:00| seen|...

CVE-2021-3297

CVE-2021-3297 affects Zyxel NBG2105 devices (V1.00(AAGU.2)C0). The vulnerability is an authentication bypass where setting the login cookie to 1 grants administrator access to the device. This is evidenced by multiple connected sources (e.g., NVD entry, Nuclei template, Red Hat/CIRCL references) ...

CVE-2020-3297

CVE-2020-3297 affects Cisco Small Business Smart and Managed Switches. The root cause is weak entropy in session identifiers used by the web-based management interface, enabling an unauthenticated remote attacker to brute-force a current session ID and hijack a session with privileges up to admin...

Cisco Warns of High-Severity Bug in Small Business Switch Lineup

Cisco Systems is warning of a high-severity flaw affecting more than a half-dozen of its small business switches. The flaw could allow remote, unauthenticated attackers to access the switches’ management interfaces with administrative privileges. Specifically affected are Series Smart Switches,...

Oracle VM VirtualBox < 5.2.20 Multiple Vulnerabilities (Oct 2018 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualizati...

CVE-2018-3297

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3297

CVE-2018-3297 affects Oracle VM VirtualBox (core subcomponent) and is fixed in VirtualBox 5.2.20. The issue targets the Core component and was addressed in upstream/distribution advisories (e.g., openSUSE Mageia updates), which note that the affected versions are prior to 5.2.20 and that remediat...

CVE-2015-3297

Etherpad exposes a directory traversal flaw in Minify.js (node/utils/Minify.js) affecting Etherpad versions 1.1.1–1.5.2. The root cause is unsafely constructed path handling where backslashes are replaced with slashes in the path parameter of HTTP API requests, enabling read access to arbitrary f...

CVE-2017-3297

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Framework. Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2017-3297

The CVE-2017-3297 entry concerns Oracle FLEXCUBE Direct Banking (subcomponent: Framework). Affected versions are 12.0.2 and 12.0.3. The vulnerability is described as difficult to exploit, allowing a low-privilege attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking, ...

CVE-2016-3297

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3297

CVE-2016-3297 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue in how browsers handle objects, enabling remote code execution when a user visits a crafted site. Impact could include full user rights compromise; in some contexts memory cor...

MS16-105: Cumulative Security Update for Microsoft Edge (3183043)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3183043. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3297)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that executes malicious...

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...