WebGlimpse 2.18.7 - Directory Traversal

A directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter. id: CVE-2009-5114 info: name: WebGlimpse 2.18.7 - Directory Traversal author: daffainfo severity: medium description: A...

EUVD-2015-7039

Malware in sbrugna...

EUVD-2015-1241

Malware in sbrugna...

EUVD-2015-6965

Malware in sbrugna...

EUVD-2015-6964

Malware in sbrugna...

EUVD-2017-11574

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password...

CVE-2017-2391

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password...

CVE-2017-2391

The CVE-2017-2391 issue affects Apple iWork exports (Pages, Numbers, Keynote) on macOS and iOS prior to the patched versions. Root cause: iWork exported PDFs used weak 40-bit RC4 encryption, enabling exposure of password-protected PDF contents. Affected versions include Pages 6.0/6.1, Numbers 4.0...

CVE-2017-2391

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password...

About the security content of Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS

About the security content of Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS This document describes the security content of Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac and Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS. About Apple securi...

Apple Releases Multiple Security Updates

Apple has released security updates for several products to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the following Apple Support Articles...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the QuickLook module in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption using a specially created iWork file...

Apple OS X iWork File Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles iWork with a security vulnerability that allows an attacker to build malicious files that can be tricked into parsing by the user, which can crash the application or execute arbitrary code...

CVE-2015-7107

QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted iWork file...

Memory corruption

QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted iWork file...

CVE-2015-7107

QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted iWork file...

CVE-2015-7107

Technical details about CVE-2015-7107 are not provided in the supplied documents. No affected versions, impact specifics, or remediation are stated here; monitor for updates.

Apple Keynote, Pages, Numbers, iWork multiple security vulnerabilities

Restrictions bypass, memory corruptions...