CVE-2023-36011

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:23+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-27 00:01:26+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-28 18:00:06+00:00| seen| https://t.me/PositiveTechnologies/2225 2026-07-29 00:00:29+00:00| seen|...

MiracleLinux 9 : kernel-5.14.0-570.12.1.el9_6 (AXSA:2025-10392:38)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10392:38 advisory. kernel: drm: nv04: Fix out of bounds access CVE-2024-27008 kernel: Bluetooth: Fix use-after-free bugs caused by scosocktimeout CVE-2024-27398 kerne...

CVE-2025-36011

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

Security Bulletin: IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL

Summary IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL CVE-2025-36011. Vulnerability Details CVEID:CVE-2025-36011 DESCRIPTION: IBM Jazz for Service Management does not set the secure attribute on authorization tokens or session cookies. Attackers may be...

CVE-2022-36011

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b. The fix will be included in...

CVE-2022-36011

creationtimestamp| type| source ---|---|--- 2025-04-23 17:05:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13090...

Linux Distros Unpatched Vulnerability : CVE-2024-36011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null- ptr-deref Fix potential null-ptr-deref in...

CVE-2024-36011

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null-ptr-deref Fix potential null-ptr-deref in hcilebigsyncestablishedevt...

CVE-2023-36011

Win32k Elevation of Privilege Vulnerability...

CVE-2023-36011 Win32k Elevation of Privilege Vulnerability

...

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

KB5033420: Windows Server 2012 R2 Security Update (December 2023)

The remote Windows host is missing security update 5033420. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36006 - Win32k Elevation of Privilege Vulnerability CVE-2023-36011 - A division-by-zero...

KB5033373: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2023)

The remote Windows host is missing security update 5033373. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36006 - Win32k Elevation of Privilege Vulnerability CVE-2023-36011 - A division-by-zero...

KB5033372: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (December 2023)

The remote Windows host is missing security update 5033372. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36006 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

KB5033118: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (December 2023)

The remote Windows host is missing security update 5033118 or Azure HotPatch 5033464. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36006 - Windows Cloud Files Mini Filter Driver Elevation of...

CVE-2022-36011

CVE-2022-36011 affects TensorFlow: a null dereference when mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes. Root cause: empty attributes lead to a null dereference in MLIR/TFG import. Remediation per sources: fix landed in TensorFlow 2.10.0 and will be cherry-pic...

CVE-2022-36011 Null dereference on MLIR on empty function attributes in TensorFlow

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b. The fix will be included in...

CVE-2021-36011

Adobe Illustrator 25.2.3 (and earlier) is affected by CVE-2021-36011, a command injection vulnerability that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The issue requires user interaction and affects both macOS and Windows install...

CVE-2020-36011

CVE-2020-36011 : XSS in Add Patient Form of QDOCS Smart Hospital Management System 3.1. A remote attacker can inject arbitrary code via Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies fields. Documents confirm the affected product and the vulnerability type but do not provide...

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...