DEBIAN-CVE-2019-8819

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

EulerOS 2.0 SP3 : libxslt (EulerOS-SA-2019-2627)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to caus...

Apple iOS < 12.4.4 Vulnerability

Binary data appleios1244check.nbin...

Apple iOS v13.x (AirDrop) - (AirDoS) Denial of Service PoC

Document Title: =============== Apple iOS v13.x AirDrop - AirDoS Denial of Service PoC References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2192 Video: https://www.youtube.com/watch?v=pLpJIo-GcbQ Apple Acknowledgements: https://support.apple.com/en-us/HT210785...

Apple iOS < 13.3 Multiple Vulnerabilities

Binary data appleios133check.nbin...

Webkit CVE-2019-8835 Memory Corruption Vulnerability

Description Webkit prone to a memory corruption vulnerability. A remote attacker can leverage this issue to execute arbitrary code in the context of the user running the application. Technologies Affected Apple Ipad Mini- Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2.0 Apple Safari 1.2.1...

Apple iOS v13.x Webkit - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability

Document Title: =============== Apple iOS v13.x Webkit VCF - Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2193 Video: https://www.youtube.com/watch?v=D1YNbpvXBk Release Date: ============= 2019-12-11 Vulnerability Laboratory ID VL-ID:...

Apple iOS and iPadOS CVE-2019-8857 Security Bypass Vulnerability

Description Apple iOS and iPadOS are prone to a security bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. This issue is fixed in Apple iPadOS 13.3 and iOS 13.3. Technologies Affected Apple Ipad Mini- Apple iOS 10 Apple iOS...

WebKit CVE-2019-8846 Arbitrary Code Execution Vulnerability

Description WebKit is prone to an arbitrary-code execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected Apple Safari 1.0.0 Apple...

Apple iOS and iPadOS CVE-2019-8841 Arbitrary Code Execution Vulnerability

Description Apple iOS and iPadOS are prone to an arbitrary code execution vulnerability. A remote attacker can leverage this issue to execute arbitrary code with kernel privileges on the affected system. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected...

Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability

Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-41305)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A memory corruption vulnerability exists in the WebKit component of several Apple products,...

Apple iOS AppleFirmwareUpdateKext Arbitrary Code Execution Vulnerability

Apple iOS is an operating system on Apple smart devices. Apple iOS AppleFirmwareUpdateKext arbitrary code execution vulnerability can be exploited by a local attacker to execute arbitrary code...

Memory Corruption Vulnerability in Kernel Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of several Apple products. The vulnerability stem...

Code Injection Vulnerability in WebKit Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A security vulnerability exists in the WebKit component of several Apple products. The...

WebKit Multiple Memory Corruption Vulnerabilities

Description WebKit is prone to multiple memory-corruption vulnerabilities. A remote attacker can leverage these issues to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Ipa...

Unspecified Vulnerability in Apple iOS Face ID Component

Apple iOS is an operating system for mobile devices developed by Apple Inc. Face ID is one of the facial recognition components. A security vulnerability in the Face ID component of Apple iOS prior to version 13 could be exploited by an attacker to authenticate with the help of a 3D model...

Apple iOS < 12.4.2 Vulnerability

Binary data appleios1242check.nbin...

Apple iOS APPLE-SA-2019-9-26-3 Multiple Security Vulnerabilities

Description Apple iOS is prone to the following vulnerabilities: 1. A memory corruption vulnerability 2. An information-disclosure vulnerability 3. An address bar spoofing vulnerability 4. An information-disclosure vulnerability 5. A local security bypass vulnerability 6. A security bypass...