Oracle Linux 7 : ghostscript (ELSA-2019-2462)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2462 advisory. 9.25-2.1 - Resolves: 1737338 - CVE-2019-10216 ghostscript: -dSAFER escape via .buildfont1 701394 Tenable has extracted the preceding description block directly...

RHEL 7 : ghostscript (RHSA-2019:2462)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2462 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats ...

CVE-2019-2462

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2462

CVE-2019-2462 affects Oracle Outside In Technology (Outside In Filters) used in IBM Rational DOORS Next Generation. The IBM advisory confirms a vulnerability in Rational DOORS Next Generation 6.0.6 with Outside In technology that could allow an unauthenticated attacker, over HTTP, to read data fr...

CVE-2018-2462

In certain cases, BEx Web Java Runtime Export Web Service in SAP NetWeaver BI 7.30, 7.31. 7.40, 7.41, 7.50, does not sufficiently validate an XML document accepted from an untrusted source...

CVE-2018-2462

CVE-2018-2462 affects SAP NetWeaver BI (BEx Web Java Runtime Export Web Service) across versions 7.30, 7.31, 7.40, 7.41, and 7.50. The root cause is that the service does not sufficiently validate an XML document received from an untrusted source, enabling an XML External Entity Injection vulnera...

RHEL 7 : qemu-kvm (RHSA-2018:2462)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2462 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

CVE-2014-2462

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...

CVE-2014-2462

...

CVE-2014-2462

CVE-2014-2462 is rejected/not used as stated in the Initial Description.

CVE-2017-2462

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2017-2462

CVE-2017-2462 affects multiple Apple platforms via the Audio component. A crafted audio file may trigger memory corruption, enabling remote code execution or denial of service. Affected: iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2462

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite

About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite This document describes the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite. About Apple security...

CVE-2016-2462

Summary (CVE-2016-2462) : In Android 6.x, the Conscrypt/OpenSSL binding (OpenSSLCipher.java) mishandled updates to the AAD array, enabling possible spoofing of message authentication via unspecified vectors (internal bug 27371173). This is a local/authenticated context issue due to the cipher sta...

CVE-2016-2462

OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data AAD array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173...

shopstyle.com XSS vulnerability

Vulnerable URL: http://www.shopstyle.com/?0=%3C%2Fti%3Cscripttle%3E%3C%2Fscr%3Cscriptipt%2F%22-ale%3Cscriptrt%26lpar;0%29-%22--%3E%3Cs%3Cscriptvg%2Fo%3Cscriptnload%3Cscript%3D%27;%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016...

Oracle: Security Advisory (ELSA-2009-1162)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2462

creationtimestamp| type| source ---|---|--- 2015-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37916 2026-07-29 12:01:22+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen|...

CVE-2015-2462

CVE-2015-2462 is an OpenType font parsing vulnerability in Windows’ Adobe Type Manager Library (ATMFD.DLL). The weakness allows remote code execution when a crafted OpenType font is processed by affected Windows builds. The affected platforms include Windows Vista SP2, Windows Server 2008 SP2/R2,...