104 matches found
Apple iTunes for Windows < 12.9.5 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes for Windows installed on the remote Windows host is prior to 12.9.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210124 advisory. - An application may be able to gain elevated privileges CVE-2019-8577 - A maliciously crafted SQL query...
macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities. - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker can exploit this, via speciall...
KLA11490 Multiple vulnerabilities in iCloud
Multiple vulnerabilities were found in iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...
About the security content of iCloud for Windows 7.12
About the security content of iCloud for Windows 7.12 This document describes the security content of iCloud for Windows 7.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
KLA11489 Multiple vulnerabilities in iTunes
Multiple vulnerabilities were found in iTunes. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...
Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities
Binary data 700719.prm...
Apple iOS < 12.3 Multiple Vulnerabilities
Binary data 700713.prm...
macOS 10.x < 10.14.5 Multiple Vulnerabilities (APPLE-SA-2019-05-09)
Binary data 700667.prm...
Apple Safari 12.x < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2019-05-09)
Binary data 700666.prm...
Apple TV < 12.3 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.3. It is therefore affected by multiple vulnerabilities as described in the HT210120 security advisory: - Multiple unspecified command execution vulnerabilities exist that allow an attacker to execute arbitrary...
CVE-2015-6237
CVE-2015-6237 affects Tripwire IP360 VnE Manager, versions 7.2.2 through 7.2.5. The RPC service exposes a remote XML-RPC API that bypasses authentication, enabling an unauthenticated attacker to enumerate users, reset passwords, and manipulate IP filter restrictions via crafted privileged command...
CVE-2016-6237
The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...
CVE-2016-6237
The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...
CVE-2016-6237
The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...
CVE-2016-6237
The CVE-2016-6237 issue affects Dropbox Lepton 1.0, caused by the build_huffcodes function in lepton/jpgcoder.cc. A crafted JPEG file can trigger an out-of-bounds write, leading to a denial of service. Documents confirm the vulnerability mechanism and impact but do not provide exploitation status...
Tripwire IP360 VnE Remote Administrative API Authentication Bypass Vulnerability
The IP350 VnE is susceptible to a remote XML-RPC authentication bypass vulnerability, which allows for specially crafted privileged commands to be remotely executed without authentication. The RPC service is available on the public HTTPS interface of the VnE by default, and cannot be disabled...
CVE-2014-6237
CVE-2014-6237 is an XSS vulnerability in the News Pack extension (0.1.0 and earlier) for TYPO3, allowing remote authenticated users to inject arbitrary scripts via unspecified vectors. The connected TYPO3 security bulletin confirms that versions known to be vulnerable will no longer be available ...
CVE-2013-6237
The CVE-2013-6237 entry concerns the ISL Desktop plugin for Windows prior to version 1.4.7 used with ISL Light 3.5.4 and earlier. The vulnerability allows remote authenticated users in a shared session to obtain sensitive data by pasting clipboard contents copied by another user in the same sessi...
ISL Light Desktop 3.5.4 Information Disclosure
CVE-2013-6237:ISL Light - Desktop 3.5.4, Clipboard security issue In cases where a person is hosting a sharing session and allows a remote user to see what is happening on the local PC, its been discovered that if you locally copy something like a hidden password to the local clipboard, then the...