Apple iOS CFNetwork HTTPProtocol Component Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. The CFNetwork HTTPProtocol is one of the components used to send requests to create simple instances. A security vulnerability exists in the CFNetwork HTTPProtocol component in versions of Apple iOS prior to 9, which stem...

CVE-2015-7036

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

CVE-2015-5859

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7036

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

Sql injection

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

Input validation

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

CVE-2015-5787

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

CVE-2015-7036

CVE-2015-7036: In SQLite, the fts3_tokenizer function is the root cause, with a crafted SQL command triggering an API call using a crafted pointer value, enabling remote code execution or a crash. Affected: Apple iOS before 8.4 and macOS/OS X before 10.10.4. The connected documents provide a conc...

CVE-2015-7036: Improper Input Validation

The fts3tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a SQL command that triggers an API call with a crafted pointer value in the second argument...

CVE-2015-5787: Undefined Security Weakness

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

PT-2015-7065

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Apple OS X versions prior to 10.11 Description The issue concerns the CFNetwork HTTPProtocol component, which fails to properly recognize the HSTS preload list during a Safari private-browsing session. This makes ...

PT-2015-7064

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to the kernel in Apple iOS, which does not properly restrict debugging features. This allows attackers to bypass background-execution limitations via a crafted app...

Apple iOS拒绝服务漏洞（CNVD-2015-07143）

No description provided by source...

Apple iOS CFNetwork cookie改写漏洞

No description provided by source...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07147)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1 and OS X versions prior to 10.11.1. Allows remote attackers to execute arbitrary code or cause a denial of service via crafted font files...

Apple iOS CFNetwork cookie rewriting vulnerability

iOS is an operating system developed by Apple for mobile devices. A rewrite vulnerability exists in the Apple iOS CFNetwork cookie. An attacker can exploit this vulnerability to rewrite cookie values via a remote web server...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07146)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1, OS X 10.11.1 and watchOS versions prior to 2.0.1. The vulnerability allows attackers to exploit the vulnerability to execute arbitrary code or...

Apple iOS OCSP Certificate Validation Vulnerability

IOS is an operating system developed by Apple for mobile devices. A certificate validation vulnerability exists in Apple iOS X.509, which allows attackers to bypass security restrictions to obtain sensitive information, execute arbitrary code, or launch other attacks such as denial of service...

Apple iOS multiple security vulnerabilities

Screen unlock, information disclosure, restrictions bypass, multiple memory corruptions, weak encryption, multiple vulnerabilities in different libraries...

CVE-2015-7023

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors...