CVE-2017-7059

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component...

CVE-2017-7059

CVE-2017-7059 is a WebKit/DOMParser logic issue that enables cross-site scripting when processing malicious web content. Public details indicate affected products include Apple iOS before 10.3.3, Safari before 10.1.2, and tvOS before 10.2.2, all tied to the WebKit component. The vulnerability is ...

CVE-2015-7059

Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7059 via a flaw in the ASN.1 decoder that allows remote attackers to trigger memory corruption or arbitrary code execution through a crafted certificate. The report aggregates multiple CVEs in Apple’s 2015...

CVE-2015-7059

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

CVE-2014-7059

The CVE-2014-7059 entry concerns TheDevildogGamer Android app (package com.wTheDevildogGamer) v1.0, which does not verify X.509 certificates from SSL servers. This root cause enables MITM attackers to spoof servers and access sensitive information via a crafted certificate. Public references in t...

CVE-2006-7059

CVE-2006-7059 affects Scriptsez.net E-Dating System. The issue is multiple cross-site scripting (XSS) vulnerabilities that let remote attackers inject arbitrary script/HTML via encoded entities (&#0000039) in IMG tags to (1) messages, (2) profile fields, or (3) the id parameter in a dologin opera...