Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

493 results · Feed

  • Unscored —

    IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a c…

  • Unscored —

    IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory co…

  • Unscored —

    IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a…

  • Unscored —

    WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote …

  • Unscored —

    CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a deni…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —
    CVE-2015-5895 Public exploit

    Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and …

  • Unscored —

    Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to hav…

  • Unscored —

    IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attack…

  • Unscored —

    The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (mem…

  • Unscored —

    IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows r…

  • Unscored —

    WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service (overfl…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…

  • Unscored —

    The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterp…

  • Unscored —

    The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption)…

  • Unscored —

    The processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection…

  • Unscored —

    PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary exte…

  • Unscored —

    The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character o…

  • Unscored —

    Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app.

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memo…

  • Unscored —

    WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a de…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption)…

  • Unscored —

    The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypa…

  • Unscored —

    SpringBoard in Apple iOS before 9 allows physically proximate attackers to bypass a lock-screen preview-disabled settin…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a craf…

  • Unscored —

    The iTunes Store component in Apple iOS before 9 does not properly delete AppleID credentials from the keychain upon a …

  • Unscored —

    The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obt…