Archive
September 2015
Vulnerabilities first published in this month (UTC), newest first.
493 results · Feed
-
Unscored —
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a dif…
-
Unscored —
Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a craft…
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode atte…
-
Unscored —
NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which …
-
Unscored —
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a dif…
-
Unscored —
Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism…
-
Unscored —
WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime…
-
Unscored —
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to …
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to …
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
Mail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e-mail sender address vi…
-
Unscored —
The convenience initializer in the Multipeer Connectivity component in Apple iOS before 9 does not require an encrypted…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial …
-
Unscored —
Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of serv…
-
Unscored —
dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a d…
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishan…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a…
-
Unscored —
IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory co…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service (memory corruption and a…
-
Unscored —
WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is req…
-
Unscored —
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…
-
Unscored —
The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to…
-
Unscored —
IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local us…
-
Unscored —
The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a craft…
-
Unscored —
WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-mi…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference vi…
-
Unscored —
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…
-
Unscored —
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles fail…
-
Unscored —
The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using no…
-
Unscored —
The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldab…