CVE-2019-2458

CVE-2019-2458 affects IBM Rational DOORS Next Generation 6.0.6. A fix is available by upgrading to 6.0.6 iFix007 or later; for prior versions, upgrade to a fixed, supported version. No further exploit/vector details are provided in the connected documents.

CVE-2018-2458

CVE-2018-2458 affects SAP Business One, Crystal Reports integration (versions 9.2 and 9.3). The issue is an information disclosure due to a flaw in the connection type that allows an attacker to access data that should be restricted. NVD lists CVSSv3 base score 7.5 (HIGH) and CVSSv2 base score 5....

CVE-2017-2458

CVE-2017-2458 (Keyboards) is a buffer overflow in Apple’s Keyboards component affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, enabling arbitrary code execution in a privileged context via a crafted app. Public documents identify the issue and note patche...

Android Security Bulletin—May 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

Oracle: Security Advisory (ELSA-2013-0958)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2458

CVE-2015-2458 (ATMFD.DLL OpenType parsing) affects the Windows Adobe Type Manager Library across multiple Windows versions. The connected ExploitPack/EDB entry details an out-of-bounds read in ATMFD.DLL triggered by processing a corrupted OpenType font, leading to a potential remote code executio...

Microsoft Graphics Component Remote Code Execution (MS15-080: CVE-2015-2458)

Remote code execution vulnerabilities exist in Microsoft Windows. The vulnerability is due to an error in the way Microsoft Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts. A remote attacker can exploit this issue by enticing a victim to open a specially...

Microsoft Windows OpenType Fonts CVE-2015-2458 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...

Ubuntu: Security Advisory (USN-2458-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Firefox regression (USN-2458-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2458-3 advisory. USN-2458-1 fixed vulnerabilities in Firefox. This update introduced a regression which could make websites that use CSP fail to load under some circumstances. Thi...

Ubuntu: Security Advisory (USN-2458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Ubufox update (USN-2458-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2458-2 advisory. USN-2458-1 fixed vulnerabilities in Firefox. This update provides the corresponding version of Ubufox. Tenable has extracted the preceding description block...

openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)

flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...

openSUSE Security Update : flash-player (openSUSE-2011-4)

This update provides flash-player 11.1.102.55, which files the following critical security issues : - This update resolves a memory corruption vulnerability that could lead to code execution CVE-2011-2445. - This update resolves a heap corruption vulnerability that could lead to code execution...

openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-2)

flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...

CVE-2014-2458

CVE-2014-2458 affects the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite (SCP) versions 6.1.0.3 and 6.1.1.3. The vulnerability is described as unspecified and allows remote attackers to compromise integrity via unknown vectors related to an Install issue. The NVD e...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Debian: Security Advisory (DSA-2458-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-1908-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-1500, CVE-2013-2454, CVE-2013-2458 A vulnerability was discovered in the OpenJDK Javadoc related to...

Debian DSA-2722-1 : openjdk-7 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...