121 matches found
Amazon Linux 2 : libtiff (ALAS-2023-2236)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2236 advisory. 2023-11-29: CVE-2023-0804 was added to this advisory. 2023-11-29: CVE-2023-0802 was added to this advisory. LibTIFF 4.4.0...
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2023-2236)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 9 : toolbox (RHSA-2023:2236)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2236 advisory. Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman...
CVE-2023-2236
creationtimestamp| type| source ---|---|--- 2023-05-01 16:29:27+00:00| seen| https://t.me/cibsecurity/63123 2025-03-04 08:15:39+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ljjzkfz2la2h...
CVE-2023-2236
A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Both ioinstallfixedfile and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend...
CVE-2023-2236 Use-after-free in Linux kernel's Performance Events subsystem
A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Both ioinstallfixedfile and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend...
CVE-2023-2236
The CVE-2023-2236 entry describes a use-after-free in the Linux Kernel io_uring subsystem. The root cause is a reference underflow caused by fput being called in error paths within io_install_fixed_file and its callers, leading to a local privilege escalation. Affected software is the Linux kerne...
RHEL 8 : polkit (RHSA-2021:2236)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2236 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...
CVE-2015-2236
CVE-2015-2236 is rejected/not used; this entry does not represent an active vulnerability.
RHEL 8 : subversion:1.10 (RHSA-2022:2236)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:2236 advisory. Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of fil...
Mageia: Security Advisory (MGASA-2013-0310)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:2236-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:0879-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1470-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-2236
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Advanced Global Intercompany. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...
CVE-2021-2236
CVE-2021-2236 affects Oracle E-Business Suite, Oracle Financials Common Modules, Advanced Global Intercompany (versions 12.1.1–12.1.3). The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise the module and potentially create, delete, or modify data, granting unaut...
CVE-2021-2236
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Advanced Global Intercompany. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...
CVE-2020-2236
The CVE-2020-2236 entry concerns Jenkins’ Yet Another Build Visualizer Plugin. Versions 1.11 and earlier are vulnerable to stored XSS because tooltip content is not escaped, exploitable by users with Run/Update permission. The issue is addressed by updating to version 1.12 or later, which escapes...
RHEL 6 : java-1.7.1-ibm (RHSA-2020:2236)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2236 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...