CVE-2014-4363

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via 1 an http web site, 2 an https web site with an unacceptable X.509 certificate, or 3 an IFRAME element...

CVE-2014-4363

CVE-2014-4363 affects Safari/WebKit in iOS prior to iOS 8. The root issue is improper restriction of password autofill in forms, enabling an attacker to obtain user credentials via (1) an HTTP site, (2) an HTTPS site with an invalid/broken certificate, or (3) an iframe. Public writeups describe t...

CVE-2014-4363: Undefined Security Weakness

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via 1 an http web site, 2 an https web site with an unacceptable X.509 certificate, or 3 an IFRAME element...

PT-2014-5833

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue allows remote attackers to obtain sensitive information via certain web sites or elements, including 1 an http web site, 2 an https web site with an unacceptable X.509 certificate, or 3 an...

Minimo password manager information leak

Crossite scripting in combination with form autofilling feature may cause password to be transmitted to different site...