CVE-2023-3384

Technical details about CVE-2023-3384 (affected product/version, root cause, impact, fix) are not provided in the connected documents; monitor for updates.

Debian: Security Advisory (DLA-3384-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3384

creationtimestamp| type| source ---|---|--- 2022-11-30 00:29:49+00:00| seen| https://t.me/cibsecurity/53690 2025-01-23 21:03:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2836...

CVE-2022-3384

The WordPress Ultimate Member plugin (up to version 2.5.0) is vulnerable to remote code execution via the populate_dropdown_options function, which passes user input to call_user_func() and is restricted to non-parameter PHP functions. An authenticated administrator can execute arbitrary code on ...

CVE-2022-3384 Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options

The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populatedropdownoptions function that accepts user supplied input and passes it through calluserfunc. This is restricted to non-parameter PHP functions like phpinfo; sin...

CVE-2021-3384

creationtimestamp| type| source ---|---|--- 2021-03-02 20:44:32+00:00| seen| https://t.me/cibsecurity/24351...

CVE-2021-3384

Stormshield Network Security is affected by CVE-2021-3384, a vulnerability in ARP/NDP table management that can temporarily prevent contacting new hosts over IPv4/IPv6. Impacted versions include 2.0.0–2.7.7, 2.8.0–2.16.0, 3.0.0–3.7.16, 3.8.0–3.11.4, and 4.0.0–4.1.5. Fixed in 2.7.8, 3.7.17, 3.11.5...

CVE-2021-3384

A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to...

Cisco Data Center Network Manager Command Injection (cisco-sa-dcnm-rest-inj-BCt8pwAJ)

According to its self-reported version, Cisco Data Center Network Manager is affected by a command injection vulnerability in specific REST API endpoints. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to inject...

CVE-2020-3384 Cisco Data Center Network Manager Command Injection Vulnerability

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...

CVE-2020-3384 Cisco Data Center Network Manager Command Injection Vulnerability

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...

CVE-2020-3384

CVE-2020-3384 affects Cisco Data Center Network Manager (DCNM) REST API endpoints. The root cause is inadequate validation of user-supplied input in the API, which could allow an authenticated, remote attacker to inject arbitrary commands on the underlying OS with the privileges of the logged-in ...

Virtuozzo Linux Errata and Security Advisory 2017:3384 Moderate

Upstream security update. Follow RHSA-2017:3384 for details...

Oracle Linux 7 : liblouis (ELSA-2017-3384)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3384 advisory. 2.5.2-12 - Resolves: CVE-2017-15101 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3384-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3384-2 advisory. USN-3384-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement H...

Ubuntu: Security Advisory (USN-3384-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3384-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3384

CVE-2017-3384 affects Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (User Interface) on multiple 12.1.x/12.2.x releases. The vulnerability (rooted in the Advanced Outbound Telephony component) allows an unauthenticated attacker who can reach the service over HTTP to compromise data...

CVE-2016-3384

CVE-2016-3384 affects Microsoft Internet Explorer 9–11 and corresponds to memory-corruption when rendering a crafted webpage, leading to remote code execution or memory exhaustion as described by the connected records. The vulnerability is tied to IE memory-corruption behavior disclosed in MS16-1...

Microsoft Internet Explorer CVE-2016-3384 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...