Lucene search
+L

1135 matches found

CNVD
CNVD
added 2020/08/12 12:00 a.m.15 views

Mozilla Firefox Path Traversal Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 28 for iOS-based platforms. An attacker can exploit the vulnerability with a malicious page to override the WKUserScript script o...

6.5CVSS6.5AI score0.00845EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/08/05 12:00 a.m.15 views

Unspecified Vulnerability in CoreFoundation Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.Apple macOS Catalina is a specialized operating system developed for Mac computers.CoreFoundation is one of the C application programming interface API components...

5.5CVSS6AI score0.03208EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/08/05 12:00 a.m.3 views

PT-2020-20865 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.6 Apple iPadOS versions prior to 13.6 Apple macOS Catalina versions prior to 10.15.6 Apple tvOS versions prior to 13.4.8 Apple watchOS versions prior to 6.2.8 Apple iTunes for Windows versions prior to 12.10.8...

7.8CVSS7.5AI score0.0151EPSS
SaveExploits0References12
CNVD
CNVD
added 2020/07/16 12:00 a.m.16 views

Apple Safari Reader Component Logic Flaw Vulnerability

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.Safari Reader is one of the reader components.... A security vulnerability exists in the Safari Reader component in Apple Safari versions prior to 13.1.2, iOS versions...

7.5CVSS6.5AI score0.0146EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:00 a.m.9 views

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabiliti...

9.3CVSS7.8AI score0.08287EPSS
SaveExploits2References11Affected Software11
OSV
OSV
added 2020/06/09 5:15 p.m.6 views

CVE-2020-9825

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

7.8CVSS7AI score0.00678EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.5 views

PT-2020-20775 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: An information disclosure issue was addressed with improved state...

5.5CVSS4.4AI score0.00794EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.5 views

PT-2020-20795 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 Description: The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. ...

7.5CVSS6.8AI score0.01375EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/06/09 12:00 a.m.6 views

PT-2020-20768 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: An information disclosure issue was addressed by removing the...

5.5CVSS4.8AI score0.00819EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:00 a.m.8 views

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities involve the use of memory after it has been freed, allowing an attacker to execute arbitrary code.

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabilities could...

9.3CVSS7.2AI score0.01826EPSS
SaveExploits0References10Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.9 views

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems, related to the execution of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are related to the execution of operations outside of the buffer in memory. Exploitation of...

10CVSS8AI score0.01797EPSS
SaveExploits0References10Affected Software11
Positive Technologies
Positive Technologies
added 2020/05/28 12:00 a.m.5 views

PT-2020-20797 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.5 iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: A race condition was addressed with improved state handling, which may allow a...

7CVSS6.2AI score0.03667EPSS
SaveExploits3References8
CNVD
CNVD
added 2020/05/28 12:00 a.m.8 views

Multiple Apple Products WebKit Component Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A memory corruption vulnerability exists in the WebKit component of several Apple...

8.8CVSS9.6AI score0.01802EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/28 12:00 a.m.9 views

Unspecified Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2020-52151)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products,...

9.8CVSS9.5AI score0.77246EPSS
SaveExploits3References1
CNVD
CNVD
added 2020/05/27 12:00 a.m.9 views

Apple macOS Catalina, iOS and iPadOS AirDrop Component Denial of Service Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.AirDrop AirDrop is one of the wireless file transfer components. A security vulnerability exists in...

7.5CVSS6.3AI score0.01193EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/05/20 12:00 a.m.4 views

PT-2020-6115 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.5 Apple iPadOS versions prior to 13.5 Apple macOS Catalina versions prior to 10.15.5 Apple tvOS versions prior to 13.4.5 Apple watchOS versions prior to 6.2.5 Apple iTunes for Windows versions prior to 12.10.7...

9.3CVSS8.7AI score0.02482EPSS
SaveExploits0References9
CNVD
CNVD
added 2020/04/24 12:00 a.m.2 views

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

6.1CVSS6.3AI score0.00686EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
added 2020/04/22 12:00 a.m.6 views

VulnCheck KEV: CVE-2020-9819

Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message...

4.3CVSS5.8AI score0.02178EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:00 a.m.8 views

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service allows a hacker to execute arbitrary code.

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a...

9.3CVSS7.7AI score0.02054EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.10 views

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service is related to buffer overflows in memory. This allows attackers to execute a type of “cross-site scripting” attack.

The vulnerability of the WebKit rendering module in OpenSUSE Leap operating systems, Mac OS X, iOS, tvOS, watchOS, Safari browser, multimedia player iTunes, and iCloud service is related to buffer overflow in memory. Exploiting this vulnerability allows a malicious actor to carry out a “cross-sit...

6.1CVSS6.8AI score0.0124EPSS
SaveExploits0References11Affected Software17
Rows per page
Query Builder