3099 matches found
About the security content of iOS 11.3
About the security content of iOS 11.3 This document describes the security content of iOS 11.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...
About the security content of AirPort Base Station Firmware Update 7.6.9
About the security content of AirPort Base Station Firmware Update 7.6.9 This document describes the security content of AirPort Base Station Firmware Update 7.6.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...
Apple Mac OS X Security Updates (HT208331)-02
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WebKitGTK+ Code Execution / Cookie Handling / Memory Corruption Vulnerabilities
WebKitGTK+ has had numerous security vulnerabilities addressed including arbitrary code execution, memory corruption, cookie theft, and various other issues. ------------------------------------------------------------------------ WebKitGTK+ Security Advisory...
Apple Safari uxss(CVE-2017-7089)
CVE-2017-7089 Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue existed in the handling of the parent-tab. This issue was addressed with improved state management. Safari 10 Local SOP bypass html function Pewvar...
Safari 10 Local SOP bypass Vulnerability
Exploit for macOS platform in category local exploits Safari 10 Local SOP bypass Vulnerability CVE-2017-7089 Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue existed in the handling of the parent-tab. This issue was addressed...
Webkit (Safari) - Universal Cross-site Scripting
function Pewvar doc=open'parent-tab://apple.com';doc.document.body.innerHTML='';Click me! Exploit by Frans Rosén html data:text/html,function yx=open'parent-tab://google.com','top',x.document.body.innerHTML='';setTimeouty,100 -- function...
About the security content of iOS 10.3.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
macOS : Apple Safari < 10.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in WebKit when handling certain JavaScript code. An unauthenticated, remote attacker can exploit this to cause ...
Apple Safari Multiple Vulnerabilities (HT207600)
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
Apple iOS < 10.3 Multiple Vulnerabilities
Binary data 700034.prm...
Safari < 10.0.3 Multiple Vulnerabilities
Binary data 9931.prm...
About the security content of iOS 10.2.1
About the security content of iOS 10.2.1 This document describes the security content of iOS 10.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
macOS : Apple Safari < 10.0.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X or macOS host is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities in WebKit : - An unspecified flaw exists in state management due to improper validation of user-supplied input. An unauthenticated, remote attacker...
Apple OS X Debugging Feature State Management Vulnerability
Apple OS X is an operating system developed by Apple Inc. The Apple OS X debugging feature has a state management issue that allows local users to exploit vulnerabilities to conduct denial of service attacks. A local attacker can exploit the vulnerability to conduct denial of service attacks...
Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information
Overview RFC 6265 previously RFC 2965 established HTTP State Management, also known as "cookies". In most web browser implementations of RFC 6265, cookies set via HTTP requests may allow a remote attacker to bypass HTTPS and reveal private session information. Description HTTP cookies have long...
Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities
Binary data 8696.prm...
Mac OS X : Apple Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.5 / 7.1.5 / 8.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the state management which can result in the user's browser history not being fully purged from 'history.plist'...
[SECURITY] Fedora 20 Update: httpcomponents-client-4.2.5-4.fc20
HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...
[SECURITY] Fedora 19 Update: httpcomponents-client-4.2.5-4.fc19
HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...