Skip to content
OpenAdvisories

Archive

10 April 2015

Vulnerabilities first published on this day (UTC), newest first.

79 results · Feed

  • Unscored —

    Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard move…

  • Unscored —

    FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or c…

  • Unscored —

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x …

  • Unscored —

    Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, whic…

  • Unscored —

    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, as used on iOS before 8.3 and other platforms, does …

  • Unscored —

    AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes…

  • Unscored —

    The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which m…

  • Unscored —

    The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHAN…

  • Unscored —

    The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local …

  • Unscored —

    The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the (1) telephone number or (2) e-mail …

  • Unscored —

    The Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to discover unique ident…

  • Unscored —

    IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information ab…

  • Unscored —

    The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 plac…

  • Unscored —

    LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, relat…

  • Unscored —

    NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary fil…

  • Unscored —

    The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcod…

  • Unscored —

    The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbi…

  • Unscored —

    Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, w…

  • Unscored —

    The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attacke…

  • Unscored —

    The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request …

  • Unscored —

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x …

  • Unscored —

    IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sens…

  • Unscored —

    Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a deni…

  • Unscored —

    libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a deni…

  • Unscored —

    The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in respons…

  • Unscored —

    Directory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read arbitrary files via a craf…

  • Unscored —

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x …

  • Unscored —

    iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause …

  • Unscored —
    CVE-2015-1140 Public exploit

    Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vecto…

  • Unscored —

    The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access un…

  • Unscored —

    Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances …

  • Unscored —

    fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified v…

  • Unscored —

    CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attack…

  • Unscored —

    WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or c…

  • High 7.8
    CVE-2015-1130 Exploited Public exploit

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

    KEV Feb 10, 2022
  • Unscored —

    IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate att…

  • Unscored —

    CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response t…

  • Unscored —

    The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local …

  • Unscored —

    LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted …

  • Unscored —

    The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware id…