Lucene search
K

403 matches found

Cvelist
Cvelist
added 2015/12/11 11:0 a.m.29 views

CVE-2015-7045

Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors...

8.3AI score0.00336EPSS
Exploits0References5
CVE
CVE
added 2015/12/11 11:0 a.m.58 views

CVE-2015-7045

The CVE-2015-7045 entry describes a vulnerability in Keychain Access on Apple OS X before 10.11.2 and tvOS before 9.1, where Keychain Access interacts with Keychain Agent in a way that allows an attacker to spoof the Keychain Server via unspecified vectors. Affected software is Apple OS X prior t...

5CVSS8AI score0.00336EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/12/11 12:0 a.m.51 views

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...

10CVSS7AI score0.70513EPSS
Exploits18References56
Tenable Nessus
Tenable Nessus
added 2015/12/10 12:0 a.m.64 views

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

10CVSS7AI score0.70513EPSS
Exploits18References58
FireEye
FireEye
added 2015/11/04 1:0 p.m.13 views

iBackDoor: High-Risk Code Hits iOS Apps

Introduction FireEye mobile researchers recently discovered potentially “backdoored” versions of an ad library embedded in thousands of iOS apps originally published in the Apple App Store. The affected versions of this library embedded functionality in iOS apps that used the library to display...

0.8AI score
Exploits0
CNVD
CNVD
added 2015/10/29 12:0 a.m.1 views

Apple OS X SecurityAgent Restriction Bypass Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple OS X versions prior to 10.11.1 where SecurityAgent fails to prevent synthetic...

4.3CVSS9AI score0.00222EPSS
Exploits0References1
NVD
NVD
added 2015/10/23 9:59 p.m.20 views

CVE-2015-5943

SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app...

4.3CVSS8.3AI score0.00222EPSS
Exploits0References2
Prion
Prion
added 2015/10/23 9:59 p.m.18 views

Design/Logic Flaw

SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app...

4.3CVSS6.2AI score0.00222EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.2 views

The vulnerability of the Mac OS X operating system, which allows a hacker to compromise the security of information.

The vulnerability of the Mac OS X operating system is related to errors in displaying the current status of the security keychain. Exploiting this vulnerability can allow a malicious actor to compromise the security of information remotely...

5CVSS5.5AI score0.00291EPSS
Exploits0References3Affected Software1
myhack58
myhack58
added 2015/10/15 12:0 a.m.19 views

iOS core application design vulnerability that exposed the user's Apple ID credentials-vulnerability warning-the black bar safety net

! Check Point alert of the Apple iOS to the core application may be exposed to user credentials. Fortunately iOS 9 contains the relevant patch. Apple ID the ios operating system specifically for user provides convenience to users themselves through an Apple ID to manage the device. Now, iOS marke...

0.3AI score
Exploits0
NVD
NVD
added 2015/10/09 5:59 a.m.19 views

CVE-2015-5915

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

5CVSS5.3AI score0.00291EPSS
Exploits0References4
NVD
NVD
added 2015/10/09 5:59 a.m.19 views

CVE-2015-5854

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

2.1CVSS4.8AI score0.00082EPSS
Exploits0References4
NVD
NVD
added 2015/10/09 5:59 a.m.18 views

CVE-2015-5836

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

4.3CVSS4.9AI score0.00286EPSS
Exploits0References3
Prion
Prion
added 2015/10/09 5:59 a.m.14 views

Design/Logic Flaw

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

4.3CVSS6.1AI score0.00286EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2015/10/09 5:59 a.m.14 views

Information disclosure

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

2.1CVSS6AI score0.00082EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2015/10/09 5:59 a.m.17 views

Code injection

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

5CVSS6.7AI score0.00291EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/10/09 1:0 a.m.22 views

CVE-2015-5854

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

5.6AI score0.00082EPSS
Exploits0References4
CVE
CVE
added 2015/10/09 1:0 a.m.54 views

CVE-2015-5854

CVE-2015-5854 : Time Machine backup functionality in Apple OS X prior to 10.11 can allow local users to obtain access to keychain items via unspecified vectors. According to the sources, the vulnerability is associated with OS X Time Machine backups and is addressed by OS X 10.11 El Capitan. Reme...

2.1CVSS5.5AI score0.00082EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2015/10/09 1:0 a.m.59 views

CVE-2015-5915

CVE-2015-5915 affects Apple OS X before 10.11 where the keychain lock state may not be displayed correctly. The initial description notes unspecified impact/attack vectors. Connected CNVD-2015-06402 describes a state management issue enabling an attacker to obtain keychain lock state information....

5CVSS6.2AI score0.00291EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2015/10/09 1:0 a.m.24 views

CVE-2015-5915

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

6.1AI score0.00291EPSS
Exploits0References4
Rows per page
Query Builder