Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

713 results · Feed

  • Unscored —
    CVE-2014-4489

    IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly initializ…

  • Unscored —
    CVE-2014-4480

    Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows…

  • Unscored —
    CVE-2014-4491

    The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 do not…

  • Unscored —
    CVE-2014-4476

    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-4477

    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-4488

    IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate …

  • Unscored —
    CVE-2014-4499

    The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store lo…

  • Unscored —
    CVE-2014-4493

    The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control o…

  • Unscored —
    CVE-2014-4485

    Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV befo…

  • Unscored —
    CVE-2014-4498

    The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify firmware during the EFI u…

  • Unscored —
    CVE-2014-4481 Public exploit

    Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows…

  • Unscored —
    CVE-2014-4467

    WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRA…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-4495

    The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-on…

  • Unscored —
    CVE-2014-4497

    Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attacke…

  • Unscored —
    CVE-2014-4494

    Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app …

  • Unscored —
    CVE-2014-4479

    WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple…

    qtwebkit-source qtwebkit-opensource-src Ubuntu
  • Unscored —
    CVE-2014-4483

    Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows re…

  • Unscored —
    CVE-2014-4487

    Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows a…

  • Unscored —
    CVE-2014-4486

    IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly h…

  • Unscored —
    CVE-2014-4492 Public exploit EPSS 20%

    libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain…

  • Unscored —
    CVE-2014-4496

    The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly res…

  • Unscored —
    CVE-2014-4484

    FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to e…

  • Unscored —
    CVE-2014-8838

    The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates…

  • Unscored —
    CVE-2014-8831

    security_taskgate in Apple OS X before 10.10.2 allows attackers to read group-ACL-restricted keychain items of arbitrar…

  • Unscored —
    CVE-2014-8828

    Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that incl…

  • Unscored —
    CVE-2014-8827

    LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from…

  • Unscored —
    CVE-2014-8826 Public exploit

    LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypa…

  • Unscored —
    CVE-2014-8819

    The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a…

  • Unscored —
    CVE-2014-8829

    SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a denial of service (out-of-b…

  • Unscored —
    CVE-2014-8832

    The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, …

  • Unscored —
    CVE-2014-8824

    The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows att…

  • Unscored —
    CVE-2014-8821

    The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a…

  • Unscored —
    CVE-2014-8830

    Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code o…

  • Unscored —
    CVE-2014-8840

    The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari sandbox protection mech…

  • Unscored —
    CVE-2014-8825

    The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service f…

  • Unscored —
    CVE-2014-8834

    UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a printing preference file, w…

  • Unscored —
    CVE-2014-8816

    CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2014-8820

    The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a…

  • Unscored —
    CVE-2014-8839

    Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which…

  • Unscored —
    CVE-2014-8836

    The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or…