CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13877

The CVE-2017-13877 entry affects Apple iOS Sandbox Profiles. In iOS versions prior to 11, the Sandbox Profiles component allowed a crafted app to determine whether arbitrary files exist outside the sandbox, enabling information disclosure about installed apps/files. Connected documents corroborat...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13806

CVE-2017-13806 affects Apple iOS prior to 11, in the Profiles component. The issue is that configuration profiles do not enforce whether pairings are allowed, which could lead to device pairing records being installed despite a disallowing profile. According to Apple’s security update content, th...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-6976

CVE-2017-6976 describes a sandbox bypass in Apple iOS Sandbox Profiles affecting iOS versions before 10.3, where a crafted app may bypass access restrictions to iCloud user records. Connected sources confirm the issue and identify Sandbox Profiles as the vulnerable component, with Apple addressin...

CVE-2017-13877: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-6976: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

Crea8Social Cross-Site Scripting Vulnerability

Crea8social is a PHP-based social networking platform developed by Nigerian software developer Tiamiyu Waliu Kola. A cross-site scripting vulnerability exists in Crea8social version 2018.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via User Profile...

VulnCheck KEV: CVE-2012-0874

The 1 JMXInvokerHAServlet and 2 EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform EAP before 5.2.0, Web Platform EWP before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow...

Facebook Secretly Provided Analytic Firm Access to Million of Profiles

By Waqas Controversies and scandals on Facebook don’t seem to end anytime This is a post from HackRead.com Read the original post: Facebook Secretly Provided Analytic Firm Access to Million of Profiles...

Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)

Under certain circumstances the "fetch" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessib...