CVE-2013-5150

The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation...

CVE-2013-5151

Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows remote attackers to conduct cross-site scripting XSS attacks by uploading a file...

CVE-2013-5152

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...

CVE-2013-5153

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

CVE-2013-5156

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...

CVE-2013-5157

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

CVE-2013-5137

IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app and using the 1 task-completion API or 2 VoIP API...

CVE-2013-1037

CVE-2013-1037 affects WebKit as used in Apple iOS prior to 7. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit components (memory corruption and application crash). The NVD entry lists a ba...

CVE-2013-1039

CVE-2013-1039: In WebKit as used in Apple iOS prior to 7, a crafted website can trigger memory corruption leading to remote code execution or a crash. The vulnerability affects WebKit components (as used by iOS), enabling arbitrary code execution or denial of service. Root cause is memory corrupt...

CVE-2013-1041

CVE-2013-1041 affects WebKit as used in Apple iOS before 7. The vulnerability is a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or a denial of service (application crash). Public references in the connected documents place this CVE a...

CVE-2013-1043

CVE-2013-1043 affects WebKit used in Apple iOS prior to 7. A remote attacker can trigger memory corruption to execute arbitrary code or cause a denial of service by visiting a crafted website, potentially crashing the application. The NVD notes a base score of 6.8 (Medium) with network attack vec...

CVE-2013-1044

CVE-2013-1044 affects WebKit as used in Apple iOS prior to version 7. A crafted website can trigger memory corruption in WebKit, allowing remote attackers to execute arbitrary code or cause an application crash. The connected documents corroborate a WebKit/libxml/libxslt memory‑corruption pattern...

CVE-2013-1045

CVE-2013-1045 concerns WebKit as used in Apple iOS prior to 7. The advisory states that remote attackers can trigger arbitrary code execution or cause a denial of service via a crafted website, via memory corruption in WebKit. Connected documents corroborate multiple references to this set of Web...

CVE-2013-1047

CVE-2013-1047 affects WebKit as used in Apple iOS before version 7. A crafted website can trigger memory corruption in WebKit, allowing remote code execution or a denial of service (application crash). The description does not specify exact vulnerable products/versions beyond iOS prior to 7, nor ...

CVE-2013-5127

CVE-2013-5127 : In WebKit as used by Apple iOS before 7, a crafted website can trigger memory corruption in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service. The issue is tied to WebKit’s memory handling; the initial description cites remote code execution ...

CVE-2013-5129

CVE-2013-5129 affects WebKit in Apple iOS prior to 7. It describes two user-assisted XSS vectors: (1) drag-and-drop and (2) copy-and-paste, allowing an attacker to inject arbitrary script/HTML via data handled by WebKit. The vulnerability arises from how WebKit processes dragged/pasted content an...

CVE-2013-5131

Affected software: WebKit in Apple iOS before 7.0. Vulnerable component/behavior: WebKit’s URL handling can be exploited to inject arbitrary script or HTML via a crafted URL. Impact (as described): Cross-site scripting could allow remote execution of script/HTML. Evidence: CVE-2013-5131 described...

CVE-2013-5139

The CVE-2013-5139 entry concerns the IOSerialFamily driver. The description (supported by multiple connected records) states that an out-of-bounds array access in IOSerialFamily could allow a crafted application to cause arbitrary code execution or a denial of service. Affected platforms include ...

CVE-2013-5142

CVE-2013-5142 affects the Apple iOS kernel, before iOS 7.0. Root cause: kernel does not initialize certain data structures, enabling local users to read kernel stack memory via msgctl and segctl. Impact: information disclosure on local hosts. Remediation: update to iOS 7 or later where the issue ...