Archive
18 September 2014
Vulnerabilities first published on this day (UTC), newest first.
93 results · Feed
-
Unscored —
Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote attackers to bypass i…
-
Unscored —
Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attack…
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows …
-
Unscored —
The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an ac…
-
Unscored —
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged cont…
-
Unscored —
Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote…
-
Unscored —
Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physica…
-
Unscored —
IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attacke…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote att…
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows …
-
Unscored —
The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, w…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted …
-
Unscored —
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install …
-
Unscored —
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write oper…
-
Unscored —
Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by read…
-
Unscored —
The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows att…
-
Unscored —
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows at…
-
Unscored —
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install u…
-
Unscored —CVE-2014-4378 Public exploit
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cau…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early port…
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permission…
-
Unscored —
Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, whic…
-
Unscored —
The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 al…
-
Unscored —
Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a p…
-
Unscored —
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's…
-
Unscored —
Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote atta…
-
Unscored —
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which …
-
Unscored —
The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profil…
-
Unscored —
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent…
-
High 7.8
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…
KEV Feb 10, 2022 -
Unscored —
Race condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information by leveraging the pre…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…