Skip to content
OpenAdvisories

Archive

14 October 2011

Vulnerabilities first published on this day (UTC), newest first.

← September 2011 2011 / October /14 November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Unscored —
    CVE-2011-0229

    Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows…

  • Unscored —
    CVE-2011-0260

    The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystr…

  • Unscored —
    CVE-2011-0231

    CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it ea…

  • Unscored —
    CVE-2011-0185

    Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows…

  • Unscored —
    CVE-2011-0230

    Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote…

  • Unscored —
    CVE-2011-0224

    CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servi…

  • Unscored —
    CVE-2011-3429

    The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, …

  • Unscored —
    CVE-2011-3246

    CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote a…

  • Unscored —
    CVE-2011-3434

    The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remo…

  • Unscored —
    CVE-2011-3427

    The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 has…

  • Unscored —
    CVE-2011-3222

    Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2011-3257

    The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the…

  • Unscored —
    CVE-2011-3255

    CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote att…

  • Unscored —
    CVE-2011-3256

    FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly othe…

    freetype Debian
  • Unscored —
    CVE-2011-3260

    Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a deni…

  • Unscored —
    CVE-2011-3216

    The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allo…

  • Unscored —
    CVE-2011-3224

    The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help info…

  • Unscored —
    CVE-2011-3254

    Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2011-3229

    Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript …

  • Unscored —
    CVE-2011-3253

    CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle atta…

  • Unscored —
    CVE-2011-3243

    Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remot…

    qtwebkit-source Ubuntu
  • Unscored —
    CVE-2011-3432

    The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via…

  • Unscored —
    CVE-2011-3231

    The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the pr…

  • Unscored —
    CVE-2011-3436

    Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before chan…

  • Unscored —
    CVE-2011-3223

    Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2011-3217

    MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —
    CVE-2011-3430

    The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, doe…

  • Unscored —
    CVE-2011-3435

    Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via…

  • Unscored —
    CVE-2011-3426

    Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary …

  • Unscored —
    CVE-2011-3437

    Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to e…

  • Unscored —
    CVE-2011-3220

    QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remo…

  • Unscored —
    CVE-2011-3259

    The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP …

  • Unscored —
    CVE-2011-3242

    The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of t…

  • Unscored —
    CVE-2011-3214

    IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an…

  • Unscored —
    CVE-2011-3225

    The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the …

  • Unscored —
    CVE-2011-3212

    CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of…

  • Unscored —
    CVE-2011-3431

    The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, whic…

  • Unscored —
    CVE-2011-3245

    The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent u…

  • Unscored —
    CVE-2011-3218

    The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain a…

  • Unscored —
    CVE-2011-3221

    QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remo…