Lucene search
+L

86 matches found

CNVD
CNVD
•added 2016/10/26 12:00 a.m.•6 views

Sandbox Profiles component information disclosure vulnerability in Apple iOS/tvOS/WatchOS (CNVD-2016-10387)

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

4.3CVSS6AI score0.00979EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/10/26 12:00 a.m.•8 views

Sandbox Profiles Component Information Disclosure Vulnerability in Apple iOS/tvOS/WatchOS

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

4.3CVSS6AI score0.00979EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2016/10/24 10:11 p.m.•56 views

Warning! Your iPhone Can Get Hacked Just by Opening a JPEG Image, PDF or Font File

What's worse than knowing that innocent looking JPEGs, PDFs and font files can hijack your iPhone, iPad, and iPod. Yes, attackers can take over your vulnerable Apple's iOS device remotely – all they have to do is trick you to view a maliciously-crafted JPEG graphic or PDF file through a website o...

6.8CVSS8.2AI score0.01812EPSS
SaveExploits0
Apple
Apple
•added 2016/10/24 12:00 a.m.•157 views

About the security content of tvOS 10.0.1

About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS0.3AI score0.03731EPSS
SaveExploits6References1Affected Software1
Apple
Apple
•added 2016/10/24 12:00 a.m.•94 views

About the security content of watchOS 3.1

About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS0.1AI score0.03731EPSS
SaveExploits6References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/10/03 12:00 a.m.•31 views

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

10CVSS7.2AI score0.08559EPSS
SaveExploits1References51
NVD
NVD
•added 2016/09/18 10:59 p.m.•20 views

CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

4.3CVSS3AI score0.00835EPSS
SaveExploits0References5
OSV
OSV
•added 2016/09/18 10:59 p.m.•8 views

CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

3.3CVSS7.3AI score0.00835EPSS
SaveExploits0References5
Prion
Prion
•added 2016/09/18 10:59 p.m.•25 views

Design/Logic Flaw

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

4.3CVSS5.8AI score0.00835EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2016/09/18 10:00 p.m.•64 views

CVE-2016-4620

CVE-2016-4620 affects Apple iOS prior to 10, in the Sandbox Profiles component. The issue is an access control flaw in SMS draft directories that allowed a crafted app to discover text-message recipients by stat-ing these directories. Apple’s remediation tightened directory access so apps cannot ...

4.3CVSS4.9AI score0.00835EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2016/09/18 10:00 p.m.•33 views

CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

2.9AI score0.00835EPSS
SaveExploits0References5
CNVD
CNVD
•added 2016/09/18 12:00 a.m.•12 views

Apple iOS Sandbox Profiles Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Sandbox Profiles is a Sandbox component. An information disclosure vulnerability exists in the Sandbox Profiles component in versions of Apple iOS prior to 10, which stems from a program that fails to properly...

4.3CVSS5.8AI score0.00835EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2016/09/15 12:00 a.m.•36 views

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

7.9CVSS4.6AI score0.01761EPSS
SaveExploits1References12
CNVD
CNVD
•added 2016/07/28 12:00 a.m.•5 views

Unauthorized Access Vulnerability in Sandbox Profiles Component of Multiple Apple Products

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Sandbox Profiles is one of...

7.8CVSS6.4AI score0.01253EPSS
SaveExploits0References1
OSV
OSV
•added 2016/07/22 2:59 a.m.•7 views

CVE-2016-4594

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call...

7.8CVSS7.3AI score0.01253EPSS
SaveExploits0References10
Prion
Prion
•added 2016/07/22 2:59 a.m.•19 views

Code injection

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call...

6.8CVSS5.8AI score0.01253EPSS
SaveExploits0References10Affected Software4
CVE
CVE
•added 2016/07/22 1:00 a.m.•62 views

CVE-2016-4594

CVE-2016-4594 corresponds to an unauthorized access issue in Apple’s Sandbox Profiles component. The vulnerability enables a local attacker to access the process list via a crafted app making privileged API calls. Affected platforms include iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to...

7.8CVSS7.3AI score0.01253EPSS
SaveExploits0References10Affected Software4
Tenable Nessus
Tenable Nessus
•added 2016/07/21 12:00 a.m.•101 views

Apple TV < 9.2.2 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.2.2. It is, therefore, affected by multiple vulnerabilities in the following components : - CoreGraphics - ImageIO - IOAcceleratorFamily - IOHIDFamily - Kernel - libxml2 - libxslt - Sandbox Profiles - WebKit - WebKit...

10CVSS7AI score0.18843EPSS
SaveExploits13References42
BDU FSTEC
BDU FSTEC
•added 2015/09/08 12:00 a.m.•15 views

The vulnerability of the iOS operating system allows a hacker to bypass the sandbox mechanism and read the values of configuration settings.

The vulnerability of the Sandboxprofiles component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the sandbox mechanism and read configuration values using a specially crafted application...

4.3CVSS5.8AI score0.01362EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2015/08/19 12:00 a.m.•12 views

Apple iOS Other App Management Parameters Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows malicious apps to utilize third-party app sandbox profiles to read information about other apps' administrative parameters...

4.3CVSS6.4AI score0.01362EPSS
SaveExploits0References1
Rows per page
Query Builder