CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2016-4613 – Ubuntu Security Notice USN-3166-1
https://notcve.org/view.php?id=CVE-2016-4613
28 Oct 2016 — An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site. Se ha descubierto un problema en ciertos productos Apple. • http://www.securityfocus.com/bid/93949 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 1%CPEs: 33EXPL: 0CVE-2011-3259 – Apple Security Advisory 2011-10-12-1
https://notcve.org/view.php?id=CVE-2011-3259
13 Oct 2011 — The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts. El kernel de iOS de Apple anterior a la v5 y Apple TV anterior a v4.4 no recuperan correctamente memoria asignada para conexiones TCP incompletas, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de recursos), mediante un un elevad... • http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 5.9EPSS: 0%CPEs: 33EXPL: 0CVE-2011-3427 – Apple Security Advisory 2011-10-12-1
https://notcve.org/view.php?id=CVE-2011-3427
13 Oct 2011 — The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate. El componente Data Security en Apple iOS anterior a v5 y Apple TV anterior a v4.4 no restringe correctamente el uso del algoritmo de hash MD5 en los certificados X.509, lo que hace que sea más fácil para atacante de "hombre ... • http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 38EXPL: 0CVE-2011-1418
https://notcve.org/view.php?id=CVE-2011-1418
11 Mar 2011 — The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses. La funcionalidad de configuración automática de direcciones sin estado (también conocido como SLAAC) en la aplicación de redes IPv6 en Apple iOS antes de v4.3 y Apple TV antes de v4.2 los lugares situan la dirección MAC... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 2%CPEs: 38EXPL: 0CVE-2011-0162
https://notcve.org/view.php?id=CVE-2011-0162
11 Mar 2011 — Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network. Wi-Fi de Apple iOS antes de v4.3 y Apple TV antes de v4.2 no lleva a cabo todas comprobación de límites para los marcos de Wi-Fi, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) a través de tráfico sin especificar en la... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-20: Improper Input Validation •