CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

CVE-2018-2461

CVE-2018-2461 affects SAP HCM Fiori People Profile GBX01 HR 6.0. The vulnerability is due to a missing authorization check, enabling an authenticated user to escalate privileges. Public sources (NVD/CNVD) corroborate a privilege-elevation issue in this component. Severity: CVSSv3 base score 8.8 (...

CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

CVE-2017-2461

CVE-2017-2461 affects CoreText in Apple OSes: iOS 10.3 and earlier, macOS 10.12.4 and earlier, tvOS 10.2 and earlier, watchOS 3.2 and earlier. The issue enables remote denial of service via a crafted text message (resource exhaustion). Apple’s security updates patch this by updating to macOS 10.1...

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability

Dell SonicWALL GMS versions 8.1 and below are compiled with a vulnerable version of Adobe Flex SDK allowing for same-origin request forgery and cross-site content hijacking i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page:...

CVE-2016-2461

CVE-2016-2461 affects OpenSSLCipher.java in Conscrypt on Android 6.x. The issue arises from mishandling resets of the AAD array, allowing a local attacker to spoof message authentication via unspecified vectors (internal bugs 27324690, 27696681). The vulnerability is tied to Conscrypt in the Andr...

Oracle: Security Advisory (ELSA-2013-0958)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2461

creationtimestamp| type| source ---|---|--- 2015-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37917 2026-07-29 12:01:15+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen|...

Design/Logic Flaw

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted...

CVE-2015-2461

The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...

Microsoft Windows OpenType Fonts CVE-2015-2461 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...

Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net

A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...

Adobe CVE-2011-2461 Remains Exploitable Via Flex Four Years After Patch

UPDATE: This article has been updated to add commentary and clarification from Adobe. A four year old Adobe Flash patch did not properly resolve a vulnerable Flex application, and attackers can exploit the bug, which is said to affect some 30 percent of Alexa’s top 10 most popular sites in the...

Ubuntu: Security Advisory (USN-2461-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : libyaml-libyaml-perl vulnerability (USN-2461-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2461-2 advisory. Stanisaw Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML...

Ubuntu 14.04 LTS : PyYAML vulnerability (USN-2461-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2461-3 advisory. Stanisaw Pitucha and Jonathan Gray discovered that PyYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger...

Ubuntu 14.04 LTS : LibYAML vulnerability (USN-2461-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2461-1 advisory. Stanisaw Pitucha and Jonathan Gray discovered that LibYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigge...

CVE-2014-2461

CVE-2014-2461 concerns Oracle Transportation Management within Oracle Supply Chain Products Suite (versions 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3). The vulnerability is described as unspecified and related to Security, with potential confidentiality impact (partial) and remote access vi...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2013-207)

Multiple flaws were discovered in the ImagingLib and the image attribute, channel, layout and raster processing in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. CVE-2013-2470 , CVE-2013-2471 ,...