CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday released two Industrial Control Systems ICS advisories pertaining to severe flaws in Advantech R-SeeNet and Hitachi Energy APM Edge appliances. This consists of three weaknesses in the R-SeeNet monitoring solution, successf...

openSUSE: Security Advisory for the (openSUSE-SU-2021:3387-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco SD-WAN vManage Remote Code Execution (CVE-2020-3387)

A remote code execution vulnerability exists in Cisco SD-WAN vManage. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco SD-WAN vManage 19.2.2 Remote Root Exploit

Cisco SD-WAN vManage 19.2.2 Remote Root Shell PoC / This PoC exploits CVE-2020–3387 through CVE-2020–3437 / function exploit var payload = new Image1,1; payload.src =...

Cisco SD-WAN vManage 19.2.2 Remote Root

Cisco SD-WAN vManage 19.2.2 Remote Root Shell PoC / This PoC exploits CVE-2020–3387 through CVE-2020–3437 / function exploit var payload = new Image1,1; payload.src =...

RHEL 6 : java-1.7.1-ibm (RHSA-2020:3387)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3387 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...

CVE-2020-3387

Cisco SD-WAN vManage Software contains a remote code execution vulnerability (CVE-2020-3387) due to insufficient input sanitization during user authentication processing. An authenticated, remote attacker could exploit a crafted response to run commands with root privileges on an affected system....

RHEL 8 : osinfo-db and libosinfo (RHSA-2019:3387)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3387 advisory. The osinfo-db package contains a database that provides information about operating systems and hypervisor platforms to facilitate the automated...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3387

Upstream security update. Follow RHBA-2017:3387 for details...

Ubuntu 14.04 LTS / 16.04 LTS : Git vulnerability (USN-3387-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3387-1 advisory. Brian Neel, Joern Schneeweisz, and Jeff King discovered that Git did not properly handle host names in 'ssh://' URLs. A remote attacker could use this...

Ubuntu: Security Advisory (USN-3387-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3387

CVE-2017-3387 affects Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (User Interface) across 12.1.x and 12.2.x (12.1.1–12.2.6). The vulnerability allows unauthenticated, network-accessible attackers (via HTTP) to compromise the Telephony component; attacks can yield unauthorized acc...

CVE-2016-3387

creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40607...

CVE-2016-3387

CVE-2016-3387 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The root cause is failure to properly restrict access to private namespaces, enabling remote attackers to elevate privileges via unspecified vectors. Public references show exploits linked to Exploit-DB (e.g., 40607), and...

KLA10885 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handlin...

Oracle: Security Advisory (ELSA-2007-0732)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0731)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0720)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3387

The CVE-2015-3387 entry applies to Drupal’s contributed Taxonomy Tools module prior to 7.x-1.4. The vulnerability is an XSS flaw allowing remote authenticated users to inject arbitrary script or HTML via (1) node titles or (2) taxonomy term titles. Affected versions are Taxonomy Tools 7.x-1.x bef...

CVE-2015-3387

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via a 1 node or 2 taxonomy term title...