CVE-2019-6975

Django versions affected by CVE-2019-6975 are 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6. The vulnerability allows memory exhaustion through an attacker-supplied value passed to django.utils.numberformat.format(), leading to uncontrolled memory consumption. Public reports ...

CVE-2019-6975

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format function...

CVE-2018-6975

CVE-2018-6975 concerns the AirWatch Agent for iOS prior to 5.8.1, where a data-protection vulnerability allows files and keychain entries in the Agent to be unencrypted. The VMware advisory (VMSA-2018-0023) confirms a data-protection issue and states that updates to the AirWatch Agent and VMware ...

AirWatch Agent and VMware Content Locker updates resolve data protection vulnerabilities

a. The AirWatch Agent for iOS devices contains a data protection vulnerability The AirWatch Agent for iOS devices contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted. VMware would like to thank Stephan Sekula of Compass Security for...

About the security content of iOS 10.3.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2017-6975

creationtimestamp| type| source ---|---|--- 2017-04-09 16:09:44+00:00| seen| https://t.me/webamoozir/1553 2026-07-26 07:02:07+00:00| seen| https://t.me/KaitNews/3840 2026-07-27 00:01:47+00:00| seen| https://t.me/KaitNews/3840 2026-08-05 15:00:06+00:00| seen| https://t.me/KaitNews/3840 2026-08-06...

Even the WiFi can also be black? iOS 10.3 to the presence of high-risk vulnerabilities, please everyone rushed to upgrade! - Vulnerability warning-the black bar safety net

iOS 10.3 update soon, Apple launched iOS 10.3.1, according to Apple provides the iOS version, the iOS 10.3 official version of the total repair more than one hundred security vulnerabilities, and to achieve a certain extent of safety improvement. And in the version released after less than a week...

CVE-2017-6975

Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE I...

CVE-2017-6975

Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE I...

CVE-2017-6975

CVE-2017-6975 is a stack buffer overflow in the Broadcom Wi‑Fi chip firmware used by iOS devices. In affected versions (iOS prior to 10.3.1 on iPhone 5 and later, iPad 4th gen and later, iPod touch 6th gen and later), an attacker within Wi‑Fi range could remotely execute arbitrary code via crafte...

Broadcom: Stack buffer overflow when handling 802.11r (FT) authentication response (CVE-2017-6975)

Detailed analysis of reference : the https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi4.html the first part https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi11.html Part II Broadcom produces the Wi-Fi HardMAC SoCs which are used to...

Apple iOS stack buffer overflow was addressed through improved input validation (CVE-2017-6975)

iOS 10.3.1 is now available and addresses the following: Wi-Fi Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later Impact: Impact: An attacker within range may be able to execute arbitrary code on the Wi-Fi chip Description: A stack buffer overflo...

CVE-2016-6975

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-6975

Technical details about CVE-2016-6975 are not present in the provided connected documents. No concrete information on affected products/versions, root cause, exploit vectors, or remediation is available here; monitor for updates.

Adobe Reader Memory Corruption (APSB16-33: CVE-2016-6974; CVE-2016-6975; CVE-2016-6976; CVE-2016-6977)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

CVE-2015-6992

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...

CVE-2015-6975

CVE-2015-6975 affects CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1. The issue allows an attacker to trigger remote arbitrary code execution or a denial of service through a crafted font file, via memory corruption in the font parsing flow. This is a font-parsing...

CVE-2015-6992

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...

KLA10685 Multiple vulnerabilities at Apple iTunes

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Multiple memory corruptions at WebKit can be exploited via iTunes Store...

CVE-2014-6975

The CVE-2014-6975 entry concerns the Twin Lin (com.twinlin.twmo) Android app version 5, which fails to verify X.509 certificates when connecting to SSL servers. This improper validation enables MITM attackers to spoof servers and access sensitive data via a crafted certificate. The provided conne...