Lucene search
+L

51 matches found

OSV
OSV
added 2016/03/24 1:59 a.m.8 views

CVE-2016-1753

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

7.8CVSS7.6AI score0.02393EPSS
SaveExploits0References10
OSV
OSV
added 2016/03/24 1:59 a.m.4 views

CVE-2016-1750

Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app...

7.8CVSS7.6AI score0.01587EPSS
SaveExploits0References9
Prion
Prion
added 2015/12/11 11:59 a.m.21 views

Design/Logic Flaw

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043...

4.3CVSS5.7AI score0.0205EPSS
SaveExploits0References10Affected Software4
CNVD
CNVD
added 2015/11/05 12:00 a.m.9 views

Android Remote Elevation of Privilege Vulnerability (CNVD-2015-07366)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A remote elevation of privilege vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows an attacker to gain privileges through a...

9.3CVSS7.2AI score0.02574EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/11/05 12:00 a.m.11 views

Android Denial of Service Vulnerability (CNVD-2015-07341)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial-of-service vulnerability exists in version 5.x prior to Android 5.1.1 LMY48X. It allows an attacker to launch a denial-of-service attack and gain privileges via ...

5.8CVSS6.8AI score0.00563EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/10/14 12:00 a.m.10 views

Vulnerabilities in the Android operating system that allow a hacker to execute arbitrary code and read arbitrary keys from the Keystore.

The multiple vulnerabilities of the Android operating system’s Keystore component are related to buffer overflows in dynamic memory, caused by integer overflows. Exploitation of these vulnerabilities allows a remote attacker to execute arbitrary code and read arbitrary Keystore keys using a...

9.3CVSS6.4AI score0.01283EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2015/10/06 5:59 p.m.29 views

CVE-2015-6606

The Secure Element Evaluation Kit aka SEEK or SmartCard API plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786...

9.3CVSS5.9AI score0.00773EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2015/08/16 11:00 p.m.33 views

CVE-2015-3766

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...

7.6AI score0.01493EPSS
SaveExploits0References6
Prion
Prion
added 2013/09/19 10:28 a.m.27 views

Design/Logic Flaw

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...

4.3CVSS5.9AI score0.01362EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2013/09/19 10:00 a.m.36 views

CVE-2013-5156

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...

5.6AI score0.01362EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2009/10/14 12:00 a.m.10 views

PT-2009-2790 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.0 SP3 through 2.0 SP1 Description: The issue allows remote attackers to obtain unintended access to stack memory and execute arbitrary code via crafted applications, including XAML browser applications,...

9.3CVSS9.6AI score0.20982EPSS
SaveExploits2References7
Rows per page
Query Builder