Skip to content
OpenAdvisories

Archive

24 March 2016

Vulnerabilities first published on this day (UTC), newest first.

← February 2016 2016 / March /24 April 2016 →
  1. 16
  2. 24
  3. 319
  4. 414
  5. 5 
  6. 616
  7. 7 
  8. 8 
  9. 953
  10. 10 
  11. 11 
  12. 1249
  13. 1347
  14. 145
  15. 152
  16. 165
  17. 174
  18. 1811
  19. 194
  20. 20 
  21. 211
  22. 224
  23. 23 
  24. 2462
  25. 251
  26. 267
  27. 27 
  28. 284
  29. 298
  30. 302
  31. 312
All Critical High Medium Low Exploited only Public exploit

62 results · Feed

  • Unscored —
    CVE-2016-1759

    The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1772

    The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web server…

  • Unscored —
    CVE-2016-1783

    WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary cod…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1776

    Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which al…

  • Unscored —
    CVE-2016-1751

    The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute perm…

  • Unscored —
    CVE-2016-1744 Public exploit

    The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c…

  • Unscored —
    CVE-2016-1780

    WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1764 Public exploit

    The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to ob…

  • Unscored —
    CVE-2016-1738

    dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.

  • High 8.1
    CVE-2016-1762

    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffe…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1761

    libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2016-1734 Public exploit

    AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arb…

  • Unscored —
    CVE-2016-1746

    IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1765

    otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption a…

  • Unscored —
    CVE-2016-1785

    The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding d…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1732

    AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause…

  • Unscored —
    CVE-2016-1740

    FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attacker…

  • Unscored —
    CVE-2016-1769 Public exploit

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-1750

    Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS b…

  • Unscored —
    CVE-2016-1743 Public exploit

    The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c…

  • Unscored —
    CVE-2016-1788

    Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptograph…

  • Unscored —
    CVE-2009-2197

    Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafte…