104 matches found
CVE-2015-2457
CVE-2015-2457 is rejected and does not represent an active vulnerability entry.
WebKit constructJSReadableStreamDefaultReader Type Confusion
WebKit: Type confusion in constructJSReadableStreamDefaultReader CVE-2017-2457 EncodedJSValue JSCHOSTCALL constructJSReadableStreamDefaultReaderExecState& exec VM& vm = exec.vm; auto scope = DECLARETHROWSCOPEvm; JSReadableStream stream = jsDynamicDowncastexec.argument0; if !stream return...
CVE-2017-2457
creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41803...
WebKit: Type confusion in constructJSReadableStreamDefaultReader(CVE-2017-2457)
EncodedJSValue JSCHOSTCALL constructJSReadableStreamDefaultReaderExecState& exec VM& vm = exec.vm; auto scope = DECLARETHROWSCOPEvm; JSReadableStream stream = jsDynamicDowncastexec.argument0; if !stream return throwArgumentTypeErrorexec, scope, 0, "stream", "ReadableStreamReader", nullptr,...
CVE-2017-2457
CVE-2017-2457 affects WebKit in Apple products (notably iOS up to 10.3 and Safari up to 10.1). The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and a denial of service via a crafted web page. Connected documents indicate WebKit/WebKitGTK+ variants and...
CVE-2016-2457
server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...
UBUNTU-CVE-2016-2457
server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...
CVE-2016-2457
CVE-2016-2457 affects Android Wi‑Fi, specifically server/pm/UserManagerService.java, and is described as a bypass against restrictions on Wi‑Fi configuration changes via guest access in Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-05-01). The connected documents confir...
Android Security Bulletin—May 2016Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...
Oracle: Security Advisory (ELSA-2013-0958)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)
flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...
openSUSE Security Update : flash-player (openSUSE-2011-4)
This update provides flash-player 11.1.102.55, which files the following critical security issues : - This update resolves a memory corruption vulnerability that could lead to code execution CVE-2011-2445. - This update resolves a heap corruption vulnerability that could lead to code execution...
openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-2)
flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...
CVE-2014-2457
Technical details about CVE-2014-2457 are not publicly available in the provided documents; monitor for updates.
CVE-2014-2457
Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...
IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities
The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...
Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2013-207)
Multiple flaws were discovered in the ImagingLib and the image attribute, channel, layout and raster processing in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. CVE-2013-2470 , CVE-2013-2471 ,...
[SECURITY] [DSA 2727-1] openjdk-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2727-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2727-1 (openjdk-6 - several vulnerabilities)
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. OpenVAS Vulnerability Test $Id: deb2727.nasl 6611 2017-07-07 12:07:20Z...