144 matches found
CVE-2018-2471
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...
WebKit: table use-after-free(CVE-2017-2471)
There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on a nightly version of WebKit. The PoC has also been observed to crash Safari 10.0.3 on Mac. PoC: -webkit-border-image: urlfoo 1 5 1 63 repeat; -webkit-flow-into: foo function eventhandler var a;...
CVE-2017-2471
creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41813...
CVE-2017-2471
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...
CVE-2017-2471
CVE-2017-2471 is a use-after-free in WebKit affecting Apple WebKit-based components (iOS 10.3, Safari 10.1, watchOS 3.2). It allows remote code execution via a crafted web site. Public evidence includes an exploitation entry (Exploit-DB) and multiple advisories linking WebKitGTK+ variants. Remedi...
CVE-2016-2471
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913...
CVE-2016-2471
The CVE-2016-2471 entry concerns the Qualcomm Wi‑Fi driver in Android on Nexus 7 (2013) devices prior to 2016-06-01. A crafted application can cause privilege escalation by abusing the Qualcomm Wi‑Fi driver, enabling local code execution with kernel privileges. The Android 2016-06-01 security bul...
Oracle: Security Advisory (ELSA-2009-1162)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0958)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2471
CVE-2015-2471 affects Microsoft XML Core Services 3.0, 5.0, and 6.0 which still support SSL 2.0. The root cause is the ability for a remote attacker to perform a decryption attack via SSL 2.0, leading to information disclosure. The connected documents describe the vulnerability and its disclosure...
Microsoft Windows XML Core Services Information Disclosure Vulnerability (3080129)
This host is missing an important security update according to Microsoft Bulletin MS15-084. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft XML Core Services CVE-2015-2471 Man in the Middle Information Disclosure Vulnerability
Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...
MS15-084: Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129)
The remote Windows host contains a version of Microsoft XML Core Services MSXML that is affected by multiple information disclosure vulnerabilities : - An information disclosure vulnerability exists in XML Core Services MSXML due to the use of Secure Sockets Layer SSL 2.0. A man-in-the-middle...
Ubuntu: Security Advisory (USN-2471-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2471
creationtimestamp| type| source ---|---|--- 2014-02-27 09:03:19+00:00| seen| MISP/530efe60-c084-4934-b3db-6e9aac1d4fa4 2025-08-31 03:13:01+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...
IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities
The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...
Debian: Security Advisory (DSA-2471-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2013-207)
Multiple flaws were discovered in the ImagingLib and the image attribute, channel, layout and raster processing in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. CVE-2013-2470 , CVE-2013-2471 ,...
Java Runtime Environment java.awt.image.IntegerComponentRaster buffer overflow
Added: 09/04/2013 CVE: CVE-2013-2471 BID: 60659 OSVDB: 94357 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...
Java Runtime Environment java.awt.image.IntegerComponentRaster buffer overflow
Added: 09/04/2013 CVE: CVE-2013-2471 BID: 60659 OSVDB: 94357 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java...