53 matches found
macOS : Apple Safari < 10.1.2 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the WebKit component due to improper handling of SVG filters. An unauthenticated, remote...
CVE-2017-7049
creationtimestamp| type| source ---|---|--- 2017-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42363...
CVE-2017-7049
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2017-7049
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2017-7049
CVE-2017-7049 affects Apple products via the WebKit component. A crafted web site may allow remote attackers to execute arbitrary code or cause memory corruption leading to a denial of service. Affected: iOS < 10.3.3; Safari < 10.1.2; iCloud on Windows < 6.2.2; iTunes on Windows < 12....
About the security content of iCloud for Windows 6.2.2
About the security content of iCloud for Windows 6.2.2 This document describes the security content of iCloud for Windows 6.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
Apple Xcode < 7.2 Multiple Vulnerabilities (Mac OS X)
The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.2. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to a flaw in the otools component that is triggered when handling Mach-O files. A remote attacker c...
CVE-2015-7049
CVE-2015-7049 affects Apple Xcode before 7.2, via the otools component’s handling of Mach-O files. The underlying issue allows local users to gain privileges or cause a denial of service (memory corruption). This is a separate vulnerability from CVE-2015-7057, which also targets otools Mach-O pro...
CVE-2014-7049
The CVE-2014-7049 entry concerns the SomTodo (com.somcloud.somtodo) Android app version 2.0.3, which does not verify X.509 certificates from SSL servers. This trust weakness allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability a...
CVE-2013-7049
CVE-2013-7049 describes a stack-based buffer overflow in the Fish plugin’s fish.cpp for ZNC (Windows/znc-msvc) version 0.206 and earlier. The vulnerability occurs when parsing a DH1080_INIT message, where insufficient bounds checking allows an attacker-supplied long string to overflow the raw_buf...
CVE-2008-7049
NatterChat is affected by SQL injection in login.asp for versions 1.1 and 1.12, exploitable via the (1) txtUsername and (2) txtPassword fields in the form generated by home.asp. The issue is caused by improper input handling that allows remote attackers to craft SQL commands. OpenVAS and CVE refe...
CVE-2008-7049
creationtimestamp| type| source ---|---|--- 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7175 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7172...
CVE-2006-7049
CVE-2006-7049 affects WikkaWiki prior to 1.1.6.2. The Method() in wikka.php calls strstr and strrpos with arguments in the wrong order, which can bypass access restrictions and allow remote attackers to access arbitrary PHP files. Public references also describe it as a local file inclusion vulne...