93 matches found
Apple iOS < 10.3.3 Multiple Vulnerabilities
Binary data appleios1033check.nbin...
macOS : Apple Safari < 10.1.2 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the WebKit component due to improper handling of SVG filters. An unauthenticated, remote...
CVE-2017-7006
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and...
CVE-2017-7006
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and...
CVE-2017-7006
CVE-2017-7006 affects Apple WebKit components used in iOS, Safari, and tvOS prior to patches (iOS 10.3.3, Safari 10.1.2, tvOS 10.2.2). The issue is a timing side-channel vulnerability that allows a remote attacker to bypass the Same Origin Policy and exfiltrate cross-origin data via a crafted web...
CVE-2016-7006
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-7006
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2015-7006
CVE-2015-7006 is a directory traversal vulnerability in Apple's BOM handling (CPIO archive parsing) affecting iOS <9.1, OS X <10.11.1, and watchOS
CVE-2014-7006
CVE-2014-7006 affects the HydFM (com.apheliontechnologies.hydfm) Android app v1.1.9. The root cause is lack of X.509 certificate verification for SSL connections, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information; CVSSv2 base score 5.4 (Medium). Exploitati...
CVE-2008-7006
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php...
CVE-2008-7006
The CVE-2008-7006 entry affects Free PHP VX Guestbook 1.06. A vulnerability in admin/backupdb.php allows remote attackers to bypass authentication and download the database backup directly, exposing data without requiring login. The cited sources describe the issue and its impact as authenticatio...
CVE-2008-7006
creationtimestamp| type| source ---|---|--- 2008-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6456...
CVE-2006-7006
CVE-2006-7006 concerns Robin de Graff Somery 0.4.4, where a PHP remote file inclusion through upload/admin/team.php could allow arbitrary PHP execution via a URL in the checkauth parameter. Red Hat/NVD entries reiterate the description but also include a note that CVE disputes this vulnerability ...