Lucene search
K

714 matches found

Apple
Apple
added 2017/01/23 3:54 a.m.38 views

About the security content of Apple TV 7.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

9.3CVSS0.8AI score0.26217EPSS
Exploits6Affected Software1
Microsoft KB
Microsoft KB
added 2017/01/07 12:0 a.m.19 views

Microsoft security advisory: Availability of SHA-2 code signing support for Windows 7 and Windows Server 2008 R2: March 10, 2015

Microsoft security advisory: Availability of SHA-2 code signing support for Windows 7 and Windows Server 2008 R2: March 10, 2015 INTRODUCTION Microsoft has released a security advisory for IT professionals about SHA-2 code signing support. The security advisory announces the availability of a...

6.7AI score
Exploits0
Metasploit
Metasploit
added 2016/10/08 7:5 p.m.47 views

Powershell .NET Compiler

This module will build a .NET source file using powershell. The compiler builds the executable or library in memory and produces a binary. After compilation the PowerShell session can also sign the executable if provided a path the a .pfx formatted certificate. Compiler options and a list of...

10AI score
Exploits0
ThreatPost
ThreatPost
added 2016/06/24 12:0 p.m.10 views

Selfrando Technique Mitigates Attacks Unmasking Tor Users

The FBI’s apparent capability to unmask users of the Tor Network has caused hand-wringing among those concerned with privacy and civil liberties, many of whom are busy trying to win legal battles to get law enforcement to confess as to how they’re doing it. A team of academics and researchers,...

0.8AI score
Exploits0References3
OSV
OSV
added 2016/05/11 1:59 a.m.0 views

CVE-2016-0188

The User Mode Code Integrity UMCI implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a code-signing protection mechanism via unspecified vectors, aka "Internet Explorer Security Feature Bypass."...

8.8CVSS5.8AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2016/05/11 1:59 a.m.1 views

CVE-2016-0188

The User Mode Code Integrity UMCI implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a code-signing protection mechanism via unspecified vectors, aka "Internet Explorer Security Feature Bypass."...

9.3CVSS8.1AI score0.32657EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/05/11 1:0 a.m.18 views

CVE-2016-0188

The User Mode Code Integrity UMCI implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a code-signing protection mechanism via unspecified vectors, aka "Internet Explorer Security Feature Bypass."...

8.7AI score0.32657EPSS
Exploits0References3
CVE
CVE
added 2016/05/11 1:0 a.m.58 views

CVE-2016-0188

CVE-2016-0188 affects Internet Explorer 11 via the Device Guard UMCI component, enabling a remote attacker to bypass code-signing protections and run unsigned code. The vulnerability stems from UMCI policy validation weaknesses in IE’s User Mode Code Integrity, allowing code that should be blocke...

9.3CVSS8.5AI score0.32657EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2016/04/01 12:0 a.m.57 views

Apple Mac OS X Multiple Vulnerabilities-02 (Mar 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.71658EPSS
Exploits20References1
OpenVAS
OpenVAS
added 2016/04/01 12:0 a.m.53 views

Apple Mac OS X Multiple Vulnerabilities-01 (Mar 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.71658EPSS
Exploits47References1
CNVD
CNVD
added 2016/03/26 12:0 a.m.1 views

Multiple Apple products kernel security bypass vulnerabilities

Apple iOS, tvOS, and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is one of the kernel components. A security bypass vulnerability exists in the kern...

7.8CVSS8.5AI score0.00233EPSS
Exploits0References1
CNVD
CNVD
added 2016/03/25 12:0 a.m.1 views

Apple OS X code-signing subsystem information disclosure vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. An information disclosure vulnerability exists in the code-signing subsystem of Apple OS X versions prior to 10.11.4, which arises from a program's failure to properly verify file ownership. A local attacker could...

3.3CVSS5.8AI score0.00054EPSS
Exploits0References1
NVD
NVD
added 2016/03/24 1:59 a.m.13 views

CVE-2016-1773

The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors...

3.3CVSS3.7AI score0.00054EPSS
Exploits0References3
OSV
OSV
added 2016/03/24 1:59 a.m.1 views

CVE-2016-1773

The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors...

3.3CVSS5.9AI score0.00054EPSS
Exploits0References3
OSV
OSV
added 2016/03/24 1:59 a.m.1 views

CVE-2016-1751

The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app...

7.8CVSS7.4AI score
Exploits0References7
NVD
NVD
added 2016/03/24 1:59 a.m.12 views

CVE-2016-1751

The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app...

7.8CVSS7.5AI score0.00233EPSS
Exploits0References7
OSV
OSV
added 2016/03/24 1:59 a.m.2 views

CVE-2016-1738

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app...

7.8CVSS7.3AI score
Exploits0References3
NVD
NVD
added 2016/03/24 1:59 a.m.14 views

CVE-2016-1738

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app...

7.8CVSS5.2AI score0.00048EPSS
Exploits0References3
Prion
Prion
added 2016/03/24 1:59 a.m.19 views

Design/Logic Flaw

The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app...

6.8CVSS6AI score0.00233EPSS
Exploits0References7Affected Software3
Prion
Prion
added 2016/03/24 1:59 a.m.14 views

Design/Logic Flaw

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app...

7.2CVSS6.2AI score0.00048EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder