VYPR

CVEs

396,255 total · page 6477 of 7,926

AllCriticalHighKEV
  • CVE-2015-6983Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.

  • CVE-2015-6978Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.05

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991,…

  • CVE-2015-6977Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,…

  • CVE-2015-6976Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,…

  • CVE-2015-6974Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2015-5945Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.

  • CVE-2015-5944Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.03

    CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

  • CVE-2015-5943Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app.

  • CVE-2015-5942Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927.

  • CVE-2015-5940Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…

  • CVE-2015-5939Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and…

  • CVE-2015-5938Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image.

  • CVE-2015-5937Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and…

  • CVE-2015-5936Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and…

  • CVE-2015-5935Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5936, CVE-2015-5937, and…

  • CVE-2015-5934Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5933.

  • CVE-2015-5933Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5934.

  • CVE-2015-5932Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing.

  • CVE-2015-5931Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2015-5930Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-5929Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-5928Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-5927Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5942.

  • CVE-2015-5926Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.02

    The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5925.

  • CVE-2015-5925Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.02

    The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5926.

  • CVE-2015-5924Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    The OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

  • CVE-2015-7035Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors.

  • CVE-2015-7031Oct 23, 2015
    Apple Inc.
    Mac OS X Server
    risk 0.00cvss —epss 0.02

    The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors.

  • CVE-2015-7030Oct 23, 2015
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.02

    The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors.

  • CVE-2015-7022Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app.

  • CVE-2015-7017Oct 23, 2015
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992.

  • CVE-2015-7005Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.

  • CVE-2015-7004Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.

  • CVE-2015-7000Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was…

  • CVE-2015-6999Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate.

  • CVE-2015-6997Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a…

  • CVE-2015-6992Oct 23, 2015
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017.

  • CVE-2015-6986Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."

  • CVE-2015-6982Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.

  • CVE-2015-6981Oct 23, 2015
    Apple Inc.
    Webkit
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.

  • CVE-2015-6979Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2015-6975Oct 23, 2015
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.04

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017.

  • CVE-2015-4917Oct 22, 2015
    Oracle Corporation
    Supply Chain Products Suite
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-4892.

  • CVE-2015-4916Oct 22, 2015
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

  • CVE-2015-4915Oct 22, 2015
    Oracle Corporation
    Sun Systems Products Suite
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management.

  • CVE-2015-4914Oct 22, 2015
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.

  • CVE-2015-4913Oct 22, 2015
    Fedoraproject
    Fedora
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858.

  • CVE-2015-4912Oct 22, 2015
    Oracle Corporation
    Fusion Middleware
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine.

  • CVE-2015-4911Oct 22, 2015
    Oracle Corporation
    Jrockit
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.

  • CVE-2015-4910Oct 22, 2015
    Oracle Corporation
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.