Skip to content
OpenAdvisories

Archive

24 March 2016

Vulnerabilities first published on this day (UTC), newest first.

62 results · Feed

  • Unscored —

    The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permis…

  • Unscored —

    The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers…

  • Unscored —

    Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, int…

  • Unscored —

    The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.…

  • Unscored —

    The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before …

  • Unscored —

    The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 C…

  • Unscored —

    Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS bef…

  • Unscored —

    The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to ca…

  • Unscored —

    The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local use…

  • Unscored —

    WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port numbe…

  • Unscored —

    Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allow…

  • Unscored —

    The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout informati…

  • Unscored —

    AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —
    CVE-2016-1757 Public exploit EPSS 13%

    Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code…

  • Unscored —

    WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denia…

  • Unscored —

    The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with …

  • Unscored —

    Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —

    Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —
    CVE-2016-1768 Public exploit EPSS 17%

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to de…

  • Unscored —
    CVE-2016-1749 Public exploit

    IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a …

  • Unscored —

    The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged c…

  • Unscored —
    CVE-2016-1741 Public exploit EPSS 12%

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary …

  • Unscored —

    WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web s…

  • Unscored —

    The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requireme…

  • Unscored —

    The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to ex…

  • Unscored —

    TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote atta…

  • Unscored —
    CVE-2016-1767 Public exploit

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —

    IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference…

  • Unscored —

    The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote atta…

  • Unscored —

    The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof…

  • Unscored —

    Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —

    IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1755 Public exploit

    The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to ex…

  • Unscored —

    Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which…

  • Unscored —

    IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to o…

  • Unscored —

    WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtai…

  • Unscored —

    The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a de…

  • Unscored —

    The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permission…