3763 matches found
CVE-2015-5767
CVE-2015-5767 is a UI spoofing vulnerability in Safari on iOS prior to iOS 9, allowing a malicious site to spoof displayed URLs. It is part of a set of Safari UI spoofing issues (CVE-2015-5764/5765/5767) addressed by Safari 9, which includes improved URL display logic. The NVD entry cites a Mediu...
CVE-2015-5796
CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...
CVE-2015-5813
CVE-2015-5813 targets WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3, enabling remote code execution or a memory-corruption–based DoS via a crafted website. Public disclosures in the connected records show downstream patches: Mageia webkit2 updates (to 2.10.9), Fedora/openSUSE ad...
CVE-2015-5855
Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app...
CVE-2015-5860
CVE-2015-5860 affects the CFNetwork HTTPProtocol component in Apple iOS prior to 9. The root cause is a mishandling of HSTS state, which allows a remote attacker to bypass Safari private-browsing protections and track users via a crafted website. The vulnerability impact is described in the CVE e...
CVE-2015-5879
XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service TCP connection disruption via a crafted header...
CVE-2015-5819
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5818
CVE-2015-5818 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted website can trigger a vulnerability that may allow remote code execution or cause a denial of service through memory corruption and application crashes. The provided documents do not specify the exact root c...
CVE-2015-5895
CVE-2015-5895 affects SQLite versions before 3.8.10.2 used in Apple iOS up to iOS 9; the advisory notes unknown impact/attack vectors. The F5 advisory confirms the CVE and references remediation via updating SQLite to 3.8.10.2; separate entries corroborate the affected version. If deploying affec...
CVE-2015-5921
CVE-2015-5921 affects WebKit in Apple iOS versions before 9, where the Content-Disposition: attachment HTTP header is mishandled. This could allow a man-in-the-middle to disclose sensitive information via unspecified vectors. The public documentation identifies the issue as a WebKit information‑d...
CVE-2015-5867
IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2015-5804
CVE-2015-5804 affects WebKit as used by Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in WebKit. Public documents in the connected set show that Linux/Magei...
CVE-2015-5810
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5840
The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service overflow fault and app crash via crafted data...
CVE-2015-5862
The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...
CVE-2015-5821
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5921
WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive information via unspecified vectors...
CVE-2015-5845
IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5846...
CVE-2015-5832
The iTunes Store component in Apple iOS before 9 does not properly delete AppleID credentials from the keychain upon a signout action, which might allow physically proximate attackers to obtain sensitive information via unspecified vectors...