Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

493 results · Feed

  • Unscored —

    The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a dif…

  • Unscored —

    Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a craft…

  • Unscored —

    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…

  • Unscored —

    AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode atte…

  • Unscored —

    NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which …

  • Unscored —

    The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a dif…

  • Unscored —

    Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism…

  • Unscored —

    WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime…

  • Unscored —

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to …

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to …

  • Unscored —

    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    Mail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e-mail sender address vi…

  • Unscored —

    The convenience initializer in the Multipeer Connectivity component in Apple iOS before 9 does not require an encrypted…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial …

  • Unscored —

    Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of serv…

  • Unscored —

    dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —

    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…

  • Unscored —

    WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishan…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a…

  • Unscored —

    IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory co…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service (memory corruption and a…

  • Unscored —

    WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is req…

  • Unscored —

    WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbi…

  • Unscored —

    The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to…

  • Unscored —

    IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local us…

  • Unscored —

    The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a craft…

  • Unscored —

    WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-mi…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference vi…

  • Unscored —

    WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles fail…

  • Unscored —

    The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using no…

  • Unscored —

    The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldab…