Skip to content
OpenAdvisories

Archive

3 July 2015

Vulnerabilities first published on this day (UTC), newest first.

75 results · Feed

  • Unscored —

    The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restri…

  • Unscored —

    The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on N…

  • Unscored —

    Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain roo…

  • Unscored —

    Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial …

  • Unscored —

    Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering craft…

  • Unscored —

    Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which all…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —

    IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or …

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —
    CVE-2015-3704 Public exploit

    runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly dr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.…

  • Unscored —

    Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to byp…

  • Unscored —

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —

    Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause…

  • Unscored —
    CVE-2015-3673 Public exploit

    Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allo…

  • Unscored —

    QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows a…

  • Unscored —

    The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to …

  • Unscored —

    The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive me…

  • Unscored —

    Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and conseq…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a d…

  • Unscored —

    QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote a…

  • Unscored —

    Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements …

  • Unscored —

    kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that co…

  • Unscored —

    The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic associa…

  • Unscored —

    QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial…

  • Unscored —

    Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users t…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —

    The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attack…

  • Unscored —

    CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —

    IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or …

  • Unscored —

    Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…

  • Unscored —

    QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote a…

  • Unscored —

    Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —

    Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via uns…