CVE-2017-1336

IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

UBUNTU-CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

CVE-2015-1336

The CVE-2015-1336 entry concerns the man-db daily cleanup race in Mandb before 2.7.6.1-1 (Ubuntu/Debian packaging). A local user with access to the man account could escalate privileges via insecure chown usage in the mandb cleanup job. Affected software is the man-db package and the vulnerabilit...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

CVE-2016-1336

CVE-2016-1336 affects Cisco EPC3928 devices via the goform/Docsis_system endpoint. A remote attacker can trigger a denial-of-service (device crash) by sending a long LanguageSelect parameter, linked to Gateway HTTP Corruption Denial of Service (Bug CSCuy28100). Public sources in the connected set...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

CVE-2015-1336

creationtimestamp| type| source ---|---|--- 2015-12-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41158...

Apple TV < 6.1.2 Multiple Vulnerabilities

Binary data 8323.prm...

mIRC IRC URL Buffer Overflow

No description provided by source. $Id: mircircurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

May 2014 Apple Safari Browser Security Patches

Apple released an update to Safari yesterday patching 22 vulnerabilities in the WebKit browser engine that allow code execution or a browser crash. Safari 7.0.4 is available for OS X Mavericks 10.9 and Safari 6.1.4 for OS X Mountain Lion 10.8. The vulnerabilities could be exploited if the user wa...

Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities

Binary data 8264.prm...

CVE-2014-1336

CVE-2014-1336 affects WebKit as used in Apple Safari: vulnerable in Safari before 6.1.4 and in Safari 7.x before 7.0.4. The issue allows remote attackers to run arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted web site. Connected sources reiter the same ...

CVE-2014-1336

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...

Cisco WebEx Recording Format Player atas32.dll Integer Overflow (CVE-2012-1336)

A code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player. The vulnerability is due to an integer overflow leading to a heap buffer overflow when processing WRF files. A remote unauthenticated attacker can leverage this vulnerability by crafting a WRF file and...

CVE-2013-1336

CVE-2013-1336 affects Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5. The vulnerability arises because the CLR does not properly validate signatures, enabling an attacker to modify signed XML files without breaking the signature (XML Digital Signature Spoofing). This is tied to the MS13...

Microsoft .NET XML Digital Signature Spoofing (MS13-040; CVE-2013-1336)

A spoofing vulnerability has been reported when the Microsoft .NET Framework fails to properly validate the signature of specially crafted XML files. Successful exploitation would allow an attacker to modify the contents of an XML file without invalidating the signature associated with the file...