1194 matches found
The vulnerability of the iOS operating system allows a perpetrator to execute arbitrary code with elevated privileges or cause a service failure.
The vulnerability of the IOHIDFamily component in the iOS operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges or cause a service failure using a specially crafted application...
CVE-2015-6280
Cisco IOS/IOS XE SSHv2 RSA-based user authentication bypass (CVE-2015-6280) allows an unauthenticated, remote attacker who knows a valid RSA username and public key to bypass authentication and log in with the user’s privileges, potentially gaining admin access depending on VTY/user configuration...
Apple iOS checkint division overflow vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An overflow vulnerability in the Apple iOS checkint division function allows attackers to exploit the vulnerability to crash the application...
UBUNTU-CVE-2015-5822
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...
The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...
The vulnerability of the iOS operating system, which allows a hacker to circumvent access restrictions to file system objects
The vulnerability of the AppleFileConduit component in the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to file system objects by manipulating symbolic links...
Apple iOS Other App Management Parameters Information Disclosure Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows malicious apps to utilize third-party app sandbox profiles to read information about other apps' administrative parameters...
CVE-2015-3745
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...
UDID+ 2.5 Command Injection
Document Title: =============== UDID+ v2.5 iOS - Mail Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1542 Release Date: ============= 2015-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 1542...
The vulnerability of the iOS operating system, which allows a hacker to trigger a device service failure.
The vulnerability of the iOS operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to cause a device to fail to respond to service requests by sending a specially crafted Unicode text message, which is not properly processed when sent via SMS or...
Apple iOS Malicious SIM Input Verification Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS parses SIM/UIM loads in the presence of input validation, allowing attackers to exploit the vulnerability to execute arbitrary code using a malicious SIM card...
Album Streamer 2.0 iOS - Directory Traversal
Album Streamer 2.0 iOS - Directory Traversal Document Title: =============== Album Streamer v2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1481 Release Date: ============= 2015-05-07 Vulnerability Laboratory ...
CVE-2015-1097
IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...
Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02087)
Cisco IOS is a popular Internet operating system. A security vulnerability exists in Cisco IOS and Cisco IOS XE that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages over IPv4 or IPv6...
Fortinet FortiClient Man-in-the-Middle Attack Vulnerability (CNVD-2015-01148)
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. Fortinet FortiClient 5.2.028 for iOS suffers from a man-in-the-middle attack vulnerability that allows attackers to spoof SSL VPN servers with a crafted certificat...
iWifi for Chat v1.1 iOS - Denial of Service Vulnerability
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
Masque iOS Vulnerability Disclosed
The vulnerability used in the WireLurker attacks has been uncovered and was reported to Apple in July but has yet to be patched, a researcher at FireEye said. Today’s disclosure of the Masque attack, which affects iOS 7.1.1, 7.1.2, 8.0, 8.1, and 8.1.1 beta, revealed that Apple mobile devices are...
iOS QuickOffice 3.1.0 - HTTP Method Remote DoS
No description provided by source. Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8...
AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability
Document Title: =============== AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1258 Release Date: ============= 2014-04-22 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2012-5422
The CVE-2012-5422 entry describes an unspecified vulnerability in Cisco IOS on AS5400 devices, with versions before 15.3(2)T, that allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors (Bug ID CSCub61009). Affected product: Cisco IOS on AS5400 system...