Archive
September 2013
Vulnerabilities first published in this month (UTC), newest first.
454 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote a…
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proxima…
-
Unscored —
The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user appr…
-
Unscored —
The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, wh…
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content…
-
Unscored —
The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allow…
-
Unscored —
The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an applic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary we…
-
Unscored —
Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.
-
Unscored —
The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to …
-
Unscored —
IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control …
-
Unscored —
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces…
-
Unscored —
The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, wh…
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2013-5147 Public exploit
Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attacker…
-
Unscored —
WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive …
-
Unscored —
kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows lo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attacker…
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference …
-
Unscored —
The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of …
-
Unscored —
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to ob…
-
Unscored —
The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device res…
-
Unscored —
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.…
-
Unscored —
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.…
-
Unscored —
Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.…
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0…
-
Unscored —
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird b…
-
Unscored —CVE-2013-1727 Public exploit
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cros…
-
Unscored —
Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsDefaultSubmitElement function in Mozilla Firefox b…
-
Unscored —
Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ES…
-
Unscored —
Integer overflow in the drawLineLoop function in the libGLESv2 library in Almost Native Graphics Layer Engine (ANGLE), …
-
Unscored —
Use-after-free vulnerability in the JS_GetGlobalForScopeChain function in Mozilla Firefox before 24.0, Thunderbird befo…
-
Unscored —
Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.…
-
Unscored —
The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21, whe…