Lucene search
+L

5758 matches found

CNVD
CNVD
added 2017/10/11 12:00 a.m.13 views

Apple iTunes Security Bypass Vulnerability

Apple iTunes is a suite of media player applications from Apple, Inc. that are used to play and manage digital music and video files. A security bypass vulnerability exists in Apple iTunes versions prior to 12.7. The vulnerability can be exploited by an attacker to access iOS backups made through...

5.5CVSS5.2AI score0.00941EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/09/27 12:00 a.m.58 views

Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.7. It is, therefore, affected by multiple vulnerabilities in webkit. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

8.8CVSS7.2AI score0.10196EPSS
SaveExploits8References21
Tenable Nessus
Tenable Nessus
added 2017/09/27 12:00 a.m.55 views

Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.7. It is, therefore, affected by multiple vulnerabilities in webkit. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

8.8CVSS7.2AI score0.10196EPSS
SaveExploits8References21
Tenable Nessus
Tenable Nessus
added 2017/09/27 12:00 a.m.24 views

iTunes < 12.7 Data Sync Vulnerability (Mac OS)

The version of iTunes installed on the remote Mac OS X host is older than 12.7. It is, therefore, affected by a data sync vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103508; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/12";...

5.5CVSS5.7AI score0.00941EPSS
SaveExploits0References2
Apple
Apple
added 2017/09/26 4:20 a.m.34 views

About the security content of iTunes 12.7 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

5.5CVSS0.8AI score0.00941EPSS
SaveExploits0Affected Software2
Kaspersky
Kaspersky
added 2017/09/25 12:00 a.m.141 views

KLA11127 Multiple vulnerabilities in Apple iTunes

Multiple serious vulnerabilities have been found in Apple iTunes for Windows. These vulnerabilities have been found in WebKit component and can be exploited remotely to execute arbitrary code, perform cross-site scripting, bypass security restrictions and obtain sensitive information. NB: Not eve...

8.8CVSS8.7AI score0.10196EPSS
SaveExploits8References3
Apple
Apple
added 2017/09/12 12:00 a.m.48 views

About the security content of iTunes 12.7

About the security content of iTunes 12.7 This document describes the security content of iTunes 12.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

5.5CVSS5.6AI score0.00941EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.11 views

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

9.3CVSS8.1AI score0.0213EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.12 views

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

7.5CVSS8.2AI score0.01845EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.12 views

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

9.3CVSS8.1AI score0.0213EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.13 views

The vulnerability of the multimedia player iTunes, allowing a intruder to execute arbitrary code in privileged context

The vulnerability of the multimedia player iTunes is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

9.3CVSS7.8AI score0.01254EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.14 views

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

7.5CVSS8.2AI score0.06217EPSS
SaveExploits5References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.12 views

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

9.3CVSS8.1AI score0.0213EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.13 views

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

9.3CVSS8.2AI score0.08884EPSS
SaveExploits5References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.15 views

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

9.3CVSS8.1AI score0.0213EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/07/28 12:00 a.m.14 views

The vulnerability of the WebKit component of the Safari browser, the iOS operating system, and the multimedia player iTunes allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WebKit component in the Safari browser, the iOS operating system, and the multimedia player iTunes arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged conte...

7.5CVSS8.3AI score0.01534EPSS
SaveExploits0References8Affected Software3
Tenable Nessus
Tenable Nessus
added 2017/07/27 12:00 a.m.42 views

iTunes < 12.6.2 Multiple Vulnerabilities

Binary data 700168.prm...

9.3CVSS7.6AI score0.095EPSS
SaveExploits62References24
Tenable Nessus
Tenable Nessus
added 2017/07/25 12:00 a.m.51 views

Apple iTunes < 12.6.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An unauthenticated, remote attacker...

9.3CVSS7.5AI score0.095EPSS
SaveExploits62References24
Tenable Nessus
Tenable Nessus
added 2017/07/25 12:00 a.m.56 views

Apple iTunes < 12.6.2 Multiple Vulnerabilities (macOS) (credentialed check)

The version of Apple iTunes installed on the remote macOS or Mac OS X host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An...

9.3CVSS7.5AI score0.095EPSS
SaveExploits62References24
Citrix
Citrix
added 2017/07/25 12:00 a.m.13 views

Optional VPP Apps show "Mismatch between user and device iTunes store account hashes"

The following error is seen when inspecting the Delivery Group details of an Apple device on the MDM server console: "Mismatch between user and device iTunes store account hashes". Attempts to send installation commands for VPP apps from the MDM server to the Apple device can fail. Optional VPP a...

7AI score
SaveExploits0
Rows per page
Query Builder