Archive
September 2014
Vulnerabilities first published in this month (UTC), newest first.
1,146 results · Feed
-
Unscored —
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permission…
-
Unscored —
Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, whic…
-
Unscored —
The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 al…
-
Unscored —
Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a p…
-
Unscored —
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's…
-
Unscored —
Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote atta…
-
Unscored —
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which …
-
Unscored —
The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profil…
-
Unscored —
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent…
-
High 7.8
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…
KEV Feb 10, 2022 -
Unscored —
Race condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information by leveraging the pre…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a …
-
Unscored —
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize…
-
Unscored —
The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges…
-
Unscored —
The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a deni…
-
Unscored —
NSXMLParser in Foundation in Apple iOS before 8 allows attackers to read arbitrary files via XML data containing an ext…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —CVE-2014-4377 Public exploit
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitra…
-
Unscored —
SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to e…
-
Unscored —
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause…
-
Unscored —
GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows…
-
Unscored —
The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates f…
-
Unscored —
The Steganos Online Shield VPN (aka com.steganos.onlineshield) application 1.0.3 for Android does not verify X.509 cert…
-
Unscored —
The psicofxp (aka com.tapatalk.psicofxpcom) application 2.4.12.15 for Android does not verify X.509 certificates from S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Lin…
-
Unscored —
The Alien War Survivors (aka com.ly.a13.gp) application 1.3.1 for Android does not verify X.509 certificates from SSL s…
-
Medium 4.9
Schneider Electric SCADA Expert ClearSCADA Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
-
Unscored —
The Vodafone Mobile@Work (aka com.mobileiron.vodafone.MIClient) application 6.0.0.1.12R for Android does not verify X.5…
-
Unscored —
The 10000 Kindle Books Downloads (aka com.ww10000KindleBooksLatestnBestSellers) application 0.312 for Android does not …
-
Unscored —
The LabMSF Antivirus beta (aka com.ReSync.RNGN) 1.0.2 application Beta for Android does not verify X.509 certificates f…
-
Unscored —
The travelzadcomvb (aka com.tapatalk.travelzadcomvb) application 3.3.10 for Android does not verify X.509 certificates …
-
Unscored —
The SurDoc - 100GB+ FREE storage (aka com.jd.surdoc) application 1.3.4.0 for Android does not verify X.509 certificates…
-
Unscored —
The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates …
-
Unscored —
The VPlayer Video Player (aka me.abitno.vplayer.t) application 3.2.6 for Android does not verify X.509 certificates fro…
-
Unscored —
The SinoPac (aka com.sionpac.app.SinoPac) application 2.4.2 for Android does not verify X.509 certificates from SSL ser…
-
Medium 6.4
Schneider Electric SCADA Expert ClearSCADA Improper Authentication
Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allows remote attackers to read database records by leveraging access to the guest account.
-
Unscored —
The Obama for America (aka com.barackobama.ofa) application 1.02 for Android does not verify X.509 certificates from SS…