Apple iOS and tvOS App Store Man-in-the-Middle Attack Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. app Store is an application store component. A security vulnerability exists in the App Store component of Apple iOS before 11.2 and tvOS...

CVE-2018-4092

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read...

CVE-2017-7164

An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the "App Store" component. It allows man-in-the-middle attackers to spoof password prompts...

PT-2018-5605 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11.2 macOS versions prior to 10.13.2 tvOS versions prior to 11.2 watchOS versions prior to 4.2 Description: The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context o...

CVE-2017-8949

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8951

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-7162

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause ...

PT-2017-13147

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.2 macOS versions prior to 10.13.2 Description The issue involves the IOKit component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted...

Apple iOS and tvOS HomeKit Security Bypass Vulnerability

Apple iOS and tvOS are both products of the American company Apple. The former is an operating system for mobile devices; the latter is an operating system for smart TVs, of which HomeKit is a smart home platform component. A security bypass vulnerability exists in the HomeKit component in Apple...

Apple iOS Memory Corruption Vulnerability (CNVD-2018-00597)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security vulnerability exists in the Mail component of Apple iOS prior to version 11.2. An attacker can exploit this vulnerability to cause the system to use incorrect certificates for...

PYSEC-2017-148

Cross-site scripting XSS vulnerability in ZMI pages that use the managetabsmessage in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12...

CVE-2017-3567

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromi...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability (CNVD-2016-10908)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player versions 23.0.0.205 and earlier...

CVE-2016-7865

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7861

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2016-4179

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...

Unspecified Vulnerability in Oracle GoldenGate

Oracle GoldenGate is the United States Oracle Oracle company for the realization of heterogeneous IT environments between the log-based real-time changes in data capture and delivery of a comprehensive software package, which supports the capture, operation and analysis of data replication betwee...

CVE-2016-0452

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451...

CVE-2016-0450

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect availability via unknown vectors...

Unspecified Vulnerability in Oracle Sun Solaris (CNVD-2015-06816)

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. An unspecified vulnerability exists in Oracle Sun Solaris 11.2. Allows a local user to vector about NSCD affecting confidentiality, integrity, and availability...