Page 273 of 2767 results (0.017 seconds)

CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0

CVE-2014-4384 – Apple Security Advisory 2014-09-17-1

https://notcve.org/view.php?id=CVE-2014-4384

17 Sep 2014 — Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle. Vulnerabilidad de salto de directorio en la característica de instalación de App en Apple iOS anterior a 8 permite a usuarios locales instalar aplicaciones no verificadas mediante la activación de la validación de código firmado en paquetes no intencionados. iOS 8 is now available and addresses wifi credential i... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2014-4373 – Apple Security Advisory 2014-09-17-2

https://notcve.org/view.php?id=CVE-2014-4373

17 Sep 2014 — The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted application. El controlador IntelAccelerator en el subsistema IOAcceleratorFamily en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes causar una denegación de servicio (referencia a puntero nulo y cuelgue del dispositivo) a través de una aplicación manipulada. Apple TV 7 is now ... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html •

CVSS: 7.8EPSS: 1%CPEs: 18EXPL: 2

CVE-2014-4377 – Apple Security Advisory 2014-09-17-2

https://notcve.org/view.php?id=CVE-2014-4377

17 Sep 2014 — Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Desbordamiento de entero en CoreGraphics en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (cuelgue de la aplicación) a través de un documento PDF manipulado. OS X Mavericks 10.9.5 and Security Update 2014-004 are n... • https://github.com/feliam/CVE-2014-4377 • CWE-189: Numeric Errors •

CVSS: 8.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2014-4411 – Apple Security Advisory 2014-09-17-4

https://notcve.org/view.php?id=CVE-2014-4411

17 Sep 2014 — WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2. WebKit, utilizado en Apple iOS anterior a 8 y Apple TV anterior a 7, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de la memoria y caída de l... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.0EPSS: 0%CPEs: 10EXPL: 0

CVE-2014-4386 – Apple Security Advisory 2014-09-17-1

https://notcve.org/view.php?id=CVE-2014-4386

17 Sep 2014 — Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access. Condición de carrera en la característica de instalación de App en Apple iOS anterior a 8 permite a usuarios locales ganar privilegios e instalar una aplicación sin verificar mediante el aprovechamiento de acceso a escritura en /tmp. iOS 8 is now available and addresses wifi credential interception, identifier disclosure, path traversal, and ... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 2.4EPSS: 0%CPEs: 10EXPL: 0

CVE-2014-4356 – Apple Security Advisory 2014-09-17-1

https://notcve.org/view.php?id=CVE-2014-4356

17 Sep 2014 — Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen. Apple iOS anterior a 8 no sigue la opción de configuración prevista para la previsualización de mensajes de texto en el bloqueo de la pantalla, lo que permite a atacantes físicamente próximos obtener información sensible mediante la lectura de esta pantalla. iOS 8 is now available and addresses w... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 0

CVE-2014-4357 – Apple Security Advisory 2014-09-17-2

https://notcve.org/view.php?id=CVE-2014-4357

17 Sep 2014 — Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log. Accounts Framework en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes obtener información sensible mediante la lectura de datos de log que no tenían previsto estar presente en un registro. Apple TV 7 is now available and addresses wifi credential interception, information disclosure, code execution, and various ot... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.3EPSS: 0%CPEs: 18EXPL: 0

CVE-2014-4381 – Apple Security Advisory 2014-09-17-2

https://notcve.org/view.php?id=CVE-2014-4381

17 Sep 2014 — Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application. Libnotify en Apple iOS anterior a 8 y Apple TV anterior a 7 carece de comprobadores de límites adecuados en las operaciones de escritura, lo que permite a atacantes ejecutar código como root a través de una aplicación manipulada. OS X Mavericks 10.9.5 and Security Update 2014-004 are now available and address PHP code exec... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2014-4374 – Apple Foundation NSXMLParser XML eXternal Entity (XXE)

https://notcve.org/view.php?id=CVE-2014-4374

17 Sep 2014 — NSXMLParser in Foundation in Apple iOS before 8 allows attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NSXMLParser en Foundation en Apple iOS anterior a 8 permite a los atacantes leer ficheros arbitrarios a través de datos XML que contienen una declaración de entidad externa en conjunto con una referencia de entidad, relacionado con un problema de entidad externa XML (XXE). In May... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html •

CVSS: 8.1EPSS: 0%CPEs: 17EXPL: 0

CVE-2014-4422 – Apple Security Advisory 2014-09-17-2

https://notcve.org/view.php?id=CVE-2014-4422

17 Sep 2014 — The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbers. El kernel en Apple iOS anterior a 8 y Apple TV anterior a 7 utiliza generadores de números aleatorios predecibles a la primera parte de la porción del proceso de boot, lo que permite a atacantes eludir ciertos m... • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html • CWE-310: Cryptographic Issues •