Oracle Linux 8 : freerdp (ELSA-2020-2336)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-2336 advisory. - CVE-2020-11521: Fix out-of-bounds write in planar.c 1837632 - CVE-2020-11523: Fix integer overflow in region.c 1837633 Tenable has extracted the...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2019-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2336

Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure...

CVE-2019-2336

CVE-2019-2336 involves a use-after-free in the CBO listener that can lead to memory corruption on Qualcomm Snapdragon platforms. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wired Infrastructure/Networking, including MDM92...

CVE-2011-2336

The CVE-2011-2336 entry concerns WebKit in Google Chrome prior to Blink M12, involving a flaw in AnimationControllerPrivate when clearing lists that signal the start of a hardware animation. The affected surface is WebKit’s animation controller logic embedded in Chrome, with no explicit affected ...

BlackArch Linux v2019.09.01 - Penetration Testing Distribution

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers. The repository contains 2336 tools. You can install tools individually or in groups. BlackArch Linux is compatible with existing Arch installs. ChangeLog: added more than 150 new tools added...

RHEL 7 : unixODBC (RHSA-2019:2336)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2336 advisory. The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol. Security Fixes: unixODBC: Buffer...

CVE-2018-2336

CVE-2018-2336 is rejected/not used as stated; this entry does not represent an active vulnerability.

CVE-2018-2336

...

CVE-2017-2336

CVE-2017-2336 is a reflected cross-site scripting vulnerability in Juniper ScreenOS (NetScreen Firewall+VPN) affecting ScreenOS 6.3.x prior to 6.3.0r24 on SSG Series. The issue allows a network-based attacker to inject HTML/JavaScript into a management session of other users, including administra...

CVE-2017-2336 ScreenOS: XSS vulnerability in ScreenOS Firewall

A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based attacker to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the attacker...

VMware Player Code Execution And DoS Vulnerabilities (Apr 2017) - Windows

VMware Player is prone to code execution and denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-2336

CVE-2016-2336 : Type confusion exists in two methods of Ruby’s WIN32OLE class, ole_invoke and ole_query_interface . Attacker-supplied objects of unexpected types can trigger arbitrary code execution, as noted in multiple connected records. The vulnerability affects Ruby’s WIN32OLE interactions, w...

CVE-2016-2336

Removed by vendor...

Ruby WIN32OLE ole_invoke and ole_query_interface Type Confusion Vulnerabilities

Talos Vulnerability Report TALOS-2016-0029 Ruby WIN32OLE oleinvoke and olequeryinterface Type Confusion Vulnerabilities June 14, 2016 CVE Number CVE-2016-2336 DESCRIPTION Type Confusion exists in two methods of Ruby’s WIN32OLE class, oleinvoke and olequeryinterface. Attacker passing different typ...

Oracle: Security Advisory (ELSA-2012-1047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1045)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Player 7.x < 7.1.1 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Player installed on the remote Windows host is 7.x prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin that is triggered when parsing...

VMware Workstation 10.x < 10.0.6 / 11.x < 11.1.1 Multiple Vulnerabilities (VMSA-2015-0004) (Windows)

The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.6 or 11.x prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin...

NEW VMSA-2015-0004 - VMware Workstation, Fusion and Horizon View Client updates address critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2015-0004 Synopsis: VMware Workstation, Fusion and Horizon View Client updates address critical security issues Issue Date: 2015-06-0...