VYPR

CVEs

396,181 total · page 6503 of 7,924

AllCriticalHighKEV
  • CVE-2015-3807Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted XML document.

  • CVE-2015-3806Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.

  • CVE-2015-3805Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802.

  • CVE-2015-3804Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.04

    FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5756 and CVE-2015-5775.

  • CVE-2015-3803Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.

  • CVE-2015-3802Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.

  • CVE-2015-3800Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.

  • CVE-2015-3799Aug 17, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    The Apple ID OD plug-in in Apple OS X before 10.10.5 allows attackers to change arbitrary user passwords via a crafted app.

  • CVE-2015-3798Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.04cvss —epss 0.13

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than…

  • CVE-2015-3797Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than…

  • CVE-2015-3796Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.04cvss —epss 0.12

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than…

  • CVE-2015-3795Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.05

    libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app that sends a malformed XPC message.

  • CVE-2015-3794Aug 17, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.03

    The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Unicode string.

  • CVE-2015-3793Aug 17, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app.

  • CVE-2015-3792Aug 17, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789,…

  • CVE-2015-3791Aug 17, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789,…

  • CVE-2015-3790Aug 17, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789,…

  • CVE-2015-3789Aug 17, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3790,…

  • CVE-2015-3788Aug 16, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.04

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3789, CVE-2015-3790,…

  • CVE-2015-3787Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The Bluetooth subsystem in Apple OS X before 10.10.5 allows remote attackers to cause a denial of service via malformed Bluetooth ACL packets.

  • CVE-2015-3786Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The Bluetooth subsystem in Apple OS X before 10.10.5 does not properly restrict Notification Center Service access, which allows attackers to read Notification Center notifications of certain paired devices via a crafted app.

  • CVE-2015-3784Aug 16, 2015
    Apple Inc.
    Office Viewer
    risk 0.00cvss —epss 0.03

    Office Viewer in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

  • CVE-2015-3783Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.06cvss —epss 0.36

    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

  • CVE-2015-3782Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    CloudKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to access an iCloud user record associated with a previous user's login session via a crafted app.

  • CVE-2015-3781Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Quick Look in Apple OS X before 10.10.5 allows remote attackers to inject arbitrary web script or HTML via a previously visited web site that is rendered during a Quick Look search.

  • CVE-2015-3780Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The Bluetooth subsystem in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.

  • CVE-2015-3779Aug 16, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.03

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790,…

  • CVE-2015-3778Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addresses seen in previous Wi-Fi sessions by sniffing an 802.11 network for DNAv4 broadcast traffic.

  • CVE-2015-3777Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages.

  • CVE-2015-3776Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    IOKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption and application crash) via a malformed plist.

  • CVE-2015-3775Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    Apple OS X before 10.10.5 does not properly implement authentication, which allows local users to obtain admin privileges via unspecified vectors.

  • CVE-2015-3774Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The Dictionary app in Apple OS X before 10.10.5 does not use HTTPS, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof word definitions by modifying the client-server data stream.

  • CVE-2015-3773Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.03

    The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

  • CVE-2015-3772Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3769 and CVE-2015-3771.

  • CVE-2015-3771Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3769 and CVE-2015-3772.

  • CVE-2015-3770Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.03

    IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5783.

  • CVE-2015-3769Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3771 and CVE-2015-3772.

  • CVE-2015-3768Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    Integer overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that makes unspecified IOKit API calls.

  • CVE-2015-3767Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    udf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.

  • CVE-2015-3766Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the mach_port_space_info interface, which allows attackers to obtain sensitive memory-layout information via a crafted app.

  • CVE-2015-3765Aug 16, 2015
    Apple Inc.
    Quicktime
    risk 0.00cvss —epss 0.03

    QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790,…

  • CVE-2015-3764Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    Notification Center in Apple OS X before 10.10.5 does not properly remove dismissed notifications, which allows attackers to read arbitrary notifications via a crafted app.

  • CVE-2015-3763Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    Safari in Apple iOS before 8.4.1 does not limit the rate of JavaScript alert messages, which allows remote attackers to cause a denial of service (apparent browser locking) via a crafted web site.

  • CVE-2015-3762Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

  • CVE-2015-3761Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.

  • CVE-2015-3760Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.03cvss —epss 0.02

    dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.

  • CVE-2015-3759Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink.

  • CVE-2015-3758Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL.

  • CVE-2015-3757Aug 16, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane.

  • CVE-2015-3756Aug 16, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.