Skip to content
OpenAdvisories

Archive

19 September 2013

Vulnerabilities first published on this day (UTC), newest first.

43 results · Feed

  • Unscored —

    The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound …

  • Unscored —

    The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly ha…

  • Unscored —

    The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU c…

  • Unscored —

    Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and conse…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote a…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proxima…

  • Unscored —

    The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user appr…

  • Unscored —

    The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, wh…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content…

  • Unscored —

    The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allow…

  • Unscored —

    The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an applic…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary we…

  • Unscored —

    Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.

  • Unscored —

    The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to …

  • Unscored —

    IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control …

  • Unscored —

    The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces…

  • Unscored —

    The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, wh…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2013-5147 Public exploit

    Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attacker…

  • Unscored —

    WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive …

  • Unscored —

    kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows lo…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attacker…

  • Unscored —

    WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference …

  • Unscored —

    The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of …