CVE-2016-4620

The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...

Apple iOS Sandbox Profiles Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Sandbox Profiles is a Sandbox component. An information disclosure vulnerability exists in the Sandbox Profiles component in versions of Apple iOS prior to 10, which stems from a program that fails to properly...

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

Unable to Delete NTUSER.DAT* Files When a User Logs off

Occasionally, when Delete Locally Cached Profiles on logoff policy is enabled on Windows 10 Redstone, or on Windows Server 2016, NTUSER.DAT files cannot be deleted when a user logs off...

MS16-099: Description of the security update for Outlook 2016: August 9, 2016

None None...

Unauthorized Access Vulnerability in Sandbox Profiles Component of Multiple Apple Products

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Sandbox Profiles is one of...

CVE-2016-4594

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call...

Code injection

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call...

CVE-2016-4594

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call...

CVE-2016-4594

CVE-2016-4594 corresponds to an unauthorized access issue in Apple’s Sandbox Profiles component. The vulnerability enables a local attacker to access the process list via a crafted app making privileged API calls. Affected platforms include iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to...

Apple TV < 9.2.2 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.2.2. It is, therefore, affected by multiple vulnerabilities in the following components : - CoreGraphics - ImageIO - IOAcceleratorFamily - IOHIDFamily - Kernel - libxml2 - libxslt - Sandbox Profiles - WebKit - WebKit...

Nextcloud: Information disclosure

Hello Nextcloud go to https://help.nextcloud.com/users/.json for example https://help.nextcloud.com/users/amirie.json you can see the user information...

The vulnerability of the WebSphere Application Server software allows a malicious intruder to compromise the confidentiality of protected information.

The IBM WebSphere Application Server program contains a vulnerability in its security profiles, which allows a malicious attacker to gain access to protected information by manipulating URL requests...

Concrete5 5.7.3.1 Cross Site Scripting

------------------------------------------------------------------------- Concrete5 which is exactly 32 characters. 2 The vulnerable code is located in /concrete/controllers/singlepage/dashboard/system/registration/open.php: 13. public function updateregistrationtype 14. 15. if $this-isPost 16...

Voter Database Leak Exposes 154 Million Sensitive Records

White hat hacker Chris Vickery uncovered a database of 154 million U.S. voter profiles on an unprotected server chockfull of sensitive data that includes voter names, addresses, email addresses, phone numbers, gun ownership information, preferences on gay marriage and links to individual social...

June 14, 2016 — KB3163018 (OS Build 10586.420)

None None...

CVE-2016-4545

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...

Design/Logic Flaw

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...

CVE-2016-4545

CVE-2016-4545 affects F5 BIG-IP SSL/TLS handling. The vulnerability arises when SSL alerts are sent during the handshake, potentially causing unnecessary logging and resource consumption that may trigger a Traffic Management Microkernel (TMM) restart and a core file. According to F5 advisory K480...

CVE-2016-4545

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...