14228 matches found
CVE-2015-5797
CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...
CVE-2015-5798
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...
CVE-2015-5921
WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive information via unspecified vectors...
CVE-2015-5791
CVE-2015-5791 affects WebKit/JavaScriptCore in Apple iOS before 9 and iTunes before 12.3. A crafted webpage could remotely execute arbitrary code or cause a memory corruption and crash. The connected documents do not specify patch versions or available mitigations; exploitation details are not pr...
CVE-2015-5798
CVE-2015-5798 affects WebKit used by Apple iTunes prior to 12.3. The vulnerability arises in iTunes Store browsing and allows a man‑in‑the‑middle to trigger memory corruption and potentially arbitrary code execution or a denial-of-service (application crash). Affected product: Apple iTunes before...
CVE-2015-5800
CVE-2015-5800 affects WebKit used in Apple iOS before 9 and iTunes before 12.3, enabling remote code execution or memory corruption via a crafted web site. Connected sources (e.g., OpenVAS and Mageia/MGI advisories) indicate WebKit/WebKit2 updates were released to fix related vulnerabilities, inc...
CVE-2015-5807
CVE-2015-5807 affects WebKit as used in Apple iOS prior to iOS 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description notes this is a different v...
CVE-2015-5823
CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...
CVE-2015-5801
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
UBUNTU-CVE-2015-5801
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
UBUNTU-CVE-2015-5809
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5809
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
UBUNTU-CVE-2015-5794
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
UBUNTU-CVE-2015-5822
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...
UBUNTU-CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...
CVE-2015-5822
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...
CVE-2015-5788
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...
CVE-2015-5794
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
Apple iTunes < 12.3 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the bundled versions of WebKit, CoreText, the Microsoft Visual Studio C++ Redistributable Package, and ICU. Note that Nessus has not tested for these issues...