CVE-2021-3375

ActivePresenter 6.1.6 is listed in CVE-2021-3375 as affected by a memory corruption vulnerability that may lead to a DoS or arbitrary code execution. The connected documents confirm the same version impact but do not provide a concrete root-cause description, vulnerable component/file, or explici...

CVE-2020-3375

CVE-2020-3375 affects Cisco SD-WAN Solution Software. The root cause is insufficient input validation leading to a buffer overflow in the affected component when processing crafted network traffic. An unauthenticated, remote attacker could exploit this to access restricted information, modify the...

CVE-2010-3375

creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:13+00:00| seen| https://t.me/cibsecurity/7749...

CVE-2010-3375

qtparted has insecure library loading which may allow arbitrary code execution...

CVE-2010-3375

CVE-2010-3375 affects qtparted and is caused by insecure library loading, enabling arbitrary code execution. Multiple connected sources (Red Hat, Ubuntu, SUSE, NVD) describe a library-loading vulnerability in qtparted with high impact: in the NVD, CVSS v3.1 base score 9.8 (CRITICAL), vector NETWO...

Ubuntu 14.04 LTS : LXC vulnerability (USN-3375-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3375-1 advisory. It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An attacker could possibly use this issue to escape LXC containers. Tenable has extracted the...

CVE-2017-3375

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3375

CVE-2017-3375 affects Oracle E-Business Suite’s Oracle Advanced Outbound Telephony, User Interface component, with affected versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The vulnerability is exploitable via HTTP over the network by an unauthenticated attacker, with user inte...

CVE-2017-3375

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-3375

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft OLE Automation mechanism and the VBScript Scripting Engine in Internet Explorer access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the contex...

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...

MS16-104: Cumulative Security Update for Internet Explorer (3183038)

The version of Internet Explorer installed on the remote Windows host is missing Cumulative Security Update 3183038. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

Debian DSA-3375-1 : wordpress - security update

Several vulnerabilities have been fixed in Wordpress, the popular blogging engine. - CVE-2015-5714 A cross-site scripting vulnerability when processing shortcode tags has been discovered. The issue has been fixed by not allowing unclosed HTML elements in attributes. - CVE-2015-5715 A vulnerabilit...

CVE-2015-3375

Cross-site request forgery CSRF vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete user role matching rules via unspecified vectors...

CVE-2015-3375

The CVE-2015-3375 entry concerns the Drupal Shibboleth Authentication module. A CSRF vulnerability allows remote attackers to hijack administrator authentication for requests that delete user role matching rules. Affected: Shibboleth Authentication module for Drupal 6.x-4.x before 6.x-4.1 and 7.x...

SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)

Shibboleth Authentication module allows users to log in and get permissions based on federated SAML2 authentication. The roles that are assigned to users are based on a matching list. A malicious attacker can delete matching rules from the list by getting the administrator's browser to make a...

Oracle Solaris Third-Party Patch Update : tomcat (cve_2011_3375_information_disclosure)

The remote Solaris system is missing necessary patches to address security updates : - Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read...

CVE-2014-3375

Cisco’s CVE-2014-3375 affects the CCM Service interface of Cisco Unified Communications Manager Server. It enables unauthenticated remote attackers to perform reflected XSS through input validation gaps in HTTP GET/POST parameters, potentially affecting users of the web interface. Cisco’s advisor...