| Max CVSS | 10.0 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2002-1337 | 10.0 |
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
|
09-02-2024 - 03:19 | 07-03-2003 - 05:00 | |
| CVE-2015-6051 | 4.3 |
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Internet Explorer Elevation of Privilege Vulnerability."
|
13-02-2023 - 18:58 | 14-10-2015 - 01:59 | |
| CVE-2014-4371 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
07-11-2019 - 15:36 | 18-09-2014 - 10:55 | |
| CVE-2014-4378 | 5.8 |
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4407 | 4.3 |
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function calls. <a href="http://cwe.mitre.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4422 | 6.8 |
The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space proc
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4364 | 2.9 |
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryp
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2009-0052 | 5.5 |
The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (d
|
11-10-2018 - 20:59 | 12-11-2009 - 23:30 | |
| CVE-2013-2187 | 4.3 |
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.
|
09-10-2018 - 19:34 | 22-04-2014 - 14:23 | |
| CVE-2014-4424 | 7.5 |
SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
29-08-2017 - 01:35 | 19-09-2014 - 10:55 | |
| CVE-2014-4423 | 4.3 |
The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.
|
29-08-2017 - 01:35 | 18-09-2014 - 10:55 | |
| CVE-2014-4403 | 2.1 |
The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism by leveraging predictability of the location of the CPU Global Descriptor Table.
|
29-08-2017 - 01:35 | 19-09-2014 - 10:55 | |
| CVE-2014-4393 | 10.0 |
Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GLSL shader.
|
29-08-2017 - 01:34 | 19-09-2014 - 10:55 | |
| CVE-2014-4366 | 5.0 |
Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.
|
29-08-2017 - 01:34 | 18-09-2014 - 10:55 | |
| CVE-2007-6588 | 4.3 |
Cross-site scripting (XSS) vulnerability in PHCDownload 1.10 allows remote attackers to inject arbitrary web script or HTML via the username field in an unspecified component. NOTE: the provenance of this information is unknown; the details are obta
|
08-08-2017 - 01:29 | 28-12-2007 - 21:46 |