Archive
20 September 2012
Vulnerabilities first published on this day (UTC), newest first.
60 results · Feed
-
Unscored —
Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6.8 allows remote attack…
-
Unscored —CVE-2012-3716 Public exploit
CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of …
-
Unscored —
UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-depend…
-
Unscored —
CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to …
-
Unscored —
Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's …
-
Unscored —
The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended pass…
-
Unscored —
Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the addres…
-
Unscored —
Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a…
-
Unscored —
Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows…
-
Unscored —
Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users t…
-
Unscored —
The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the diali…
-
Unscored —
Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote a…
-
Unscored —
Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service (buffer overfl…
-
Unscored —
The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized …
-
Unscored —
The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows …
-
Unscored —
Buffer overflow in the IPsec component in Apple iOS before 6 allows remote attackers to execute arbitrary code via a cr…
-
Unscored —
The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically…
-
Unscored —
The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physicall…
-
Unscored —
WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assist…
-
Unscored —
Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows remote attackers to…
-
Unscored —
Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physica…
-
Unscored —
The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitializ…
-
Unscored —
Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management priv…
-
Unscored —
The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended pass…
-
Unscored —
The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature…
-
Unscored —
The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempt…
-
Unscored —
Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use…
-
Unscored —
Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remo…
-
Unscored —
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contain…
-
Unscored —
Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to ex…
-
Unscored —
The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets containing a MAC addr…
-
Unscored —
Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to t…
-
Unscored —
Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (a…
-
Unscored —
The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter data structures, wh…
-
Unscored —CVE-2011-5177 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attack…
-
Unscored —CVE-2011-5186 Public exploit
Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to injec…
-
Unscored —CVE-2011-5184 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject …
-
Unscored —CVE-2011-5180 Public exploit
Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remo…
-
Unscored —CVE-2011-5185 Public exploit
Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows r…