525 matches found
Apple iOS < 9.2 Multiple Vulnerabilities
Binary data appleios92check.nbin...
Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...
Apple iOS CFNetwork HTTPProtocol Component Vulnerability
Apple iOS is an operating system for mobile devices developed by Apple Inc. The CFNetwork HTTPProtocol is one of the components used to send requests to create simple instances. A security vulnerability exists in the CFNetwork HTTPProtocol component in versions of Apple iOS prior to 9, which stem...
CVE-2015-5859
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
Hardcoded credentials
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-5859
The CVE-2015-5859 entry concerns Apple’s CFNetwork HTTPProtocol component in iOS (pre-9) and OS X (pre-10.11). The connected CNVD/NVD records describe a vulnerability where the CFNetwork HTTPProtocol fails to correctly recognize the HSTS preload list during a Safari private-browsing session, pote...
CVE-2015-5859
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-5859: Exposure of Sensitive Information to an Unauthorized Actor
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...
Apple iOS CFNetwork cookie改写漏洞
No description provided by source...
Apple iOS CFNetwork cookie rewriting vulnerability
iOS is an operating system developed by Apple for mobile devices. A rewrite vulnerability exists in the Apple iOS CFNetwork cookie. An attacker can exploit this vulnerability to rewrite cookie values via a remote web server...
Mac OS X < 10.11 Multiple Vulnerabilities
Binary data 8982.prm...
APPLE-SA-2015-10-21-1 iOS 9.1
APPLE-SA-2015-10-21-1 iOS 9.1 iOS 9.1 is now available and addresses the following: Accelerate Framework Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to arbitrary code execution Description: A...
CVE-2015-7023
CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors...
Code injection
CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors...
CVE-2015-7023
CVE-2015-7023 affects CFNetwork in iOS and macOS. The root cause is a failure to consistently apply uppercase vs lowercase when parsing cookies, enabling a remote server to overwrite cookies via unspecified vectors. The vulnerability is described as allowing cookies to be overwritten by different...
CVE-2015-7023
CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors...
Apple iOS < 9.1 Multiple Vulnerabilities
Binary data appleios91check.nbin...
PT-2015-7464
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Description The issue arises from the improper consideration of uppercase-versus-lowercase distinction during cookie parsing in CFNetwork. This allows remote web servers to...
CVE-2015-7023: Undefined Security Weakness
CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors...