Archive
September 2014
Vulnerabilities first published in this month (UTC), newest first.
1,146 results · Feed
-
Unscored —
An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 do…
-
Unscored —
The Halieutics (aka com.corn.Halieutics) application 21.40.5 for Android does not verify X.509 certificates from SSL se…
-
Unscored —
The tx Smart (aka com.wooriwm.txsmart) application 7.05 for Android does not verify X.509 certificates from SSL servers…
-
Unscored —
The BabyBus (aka com.sinyee.babybus.concert.ru) application 3.91 for Android does not verify X.509 certificates from SS…
-
Unscored —
The Dreamland Super Theme GO Gold (aka com.gau.go.launcherex.viptheme.dreamland.gold) application 1 for Android does no…
-
Unscored —
The healthylifestyle (aka com.alek.healthylifestyle) application 1.2.2 for Android does not verify X.509 certificates f…
-
Unscored —
The Guess The Actor (aka com.gamelikeinc.actors) application 1.1 for Android does not verify X.509 certificates from SS…
-
Unscored —
The GrooveMusic (aka com.mobincube.android.sc_2HKFF) application 2.0.0 for Android does not verify X.509 certificates f…
-
Unscored —
The ChatBox - Chat Rooms (aka com.droidchatroom.messengerapp) application 2.5 for Android does not verify X.509 certifi…
-
Unscored —
The russiananime (aka com.rareartifact.russiananime68A5CCFE) application 1 for Android does not verify X.509 certificat…
-
Unscored —
The MegaBank (aka com.megabank.mobilebank) application 2.0 for Android does not verify X.509 certificates from SSL serv…
-
Unscored —
The BundesArztsuche (aka de.kbv.bas) application 1.0.1 for Android does not verify X.509 certificates from SSL servers,…
-
Unscored —
The iGolf - Golf GPS (aka com.igolf) application 20 for Android does not verify X.509 certificates from SSL servers, wh…
-
Unscored —
The Designs Nail Arts (aka com.decoracionesnailart.flickr) application 3.6.1 for Android does not verify X.509 certific…
-
Unscored —
Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote attackers to bypass i…
-
Unscored —
Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attack…
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows …
-
Unscored —
The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an ac…
-
Unscored —
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged cont…
-
Unscored —
Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote…
-
Unscored —
Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physica…
-
Unscored —
IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attacke…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote att…
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows …
-
Unscored —
The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, w…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted …
-
Unscored —
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install …
-
Unscored —
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write oper…
-
Unscored —
Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by read…
-
Unscored —
The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows att…
-
Unscored —
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows at…
-
Unscored —
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install u…
-
Unscored —CVE-2014-4378 Public exploit
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cau…
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early port…