201 matches found
UBUNTU-CVE-2017-13885
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2017-13870
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2017-7093
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...
CVE-2017-7064
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...
Information disclosure
The "HBO Mobile Banking" by Heritage Bank of Ozarks app 3.0.0 -- aka hbo-mobile-banking/id860224933 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-6991
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...
CVE-2016-4840
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...
Arbitrary Password Reset Vulnerability in ZTE E Academy APP
ZTE E Academy APP is a professional skills learning software. There is an arbitrary password reset vulnerability in ZTE E Academy APP IOS version and Android version. By using a cell phone number to retrieve the password when the SMS verification code is returned directly to the response, you onl...
Apple iOS Version Detection via App Traffic
Binary data 8845.prm...
Multiple Vulnerabilities in Apple iOS and OS X
Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; OS X is developed for Mac computers. A security vulnerability exists in Apple iOS versions prior to 8.4.1 and OS X versions prior to 10.10.5. An attacker can exploit this vulnerability to obta...
Apple iOS < 6.0.1 Multiple Vulnerabilities
Binary data appleios601check.nbin...
Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification
Binary data 5993.prm...
CVE-2007-5550
Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involving a "common network service", aka PSIRT-1255024833. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from ...
Cisco IOS Version Detection
Binary data 1107.prm...
CVE-2003-0511
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service reload via a malformed URL...
CVE-2003-0511
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service reload via a malformed URL...
CVE-2002-2052
Cisco 2611 router running IOS 12.16.5, possibly an interim release, allows remote attackers to cause a denial of service via port scans such as 1 scanning all ports on a single host and 2 scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce...
CVE-2001-0862
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL...
CVE-2001-1071
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol CDP allows remote attackers to cause a denial of service memory consumption via a flood of CDP neighbor announcements...
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/1838/info Cisco devices running IOS software may be prone to a denial of service attack if a URL containing a question mark followed by a slash ?/ is requested. The device will enter an infinite loop when supplied with a URL containing a "?/" and an enabl...