| Max CVSS | 9.3 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-4369 | 7.8 |
The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via an application that uses crafted arguments. <a href="http://cwe.mitre
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4372 | 3.6 |
syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4421 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4379 | 7.1 |
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4419 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4420 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2006-1074 | 5.0 |
Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash or hang) via a long argument to the connect command.
|
18-10-2018 - 16:30 | 09-03-2006 - 00:02 | |
| CVE-2007-6574 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action, or the forum parameter to (2)
|
15-10-2018 - 21:55 | 28-12-2007 - 21:46 | |
| CVE-2017-7210 | 4.3 |
objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
|
09-01-2018 - 02:29 | 21-03-2017 - 06:59 | |
| CVE-2014-4368 | 6.9 |
The Accessibility subsystem in Apple iOS before 8 allows attackers to interfere with screen locking via vectors related to AssistiveTouch events.
|
29-08-2017 - 01:34 | 18-09-2014 - 10:55 | |
| CVE-2014-4402 | 9.3 |
An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application.
|
29-08-2017 - 01:34 | 19-09-2014 - 10:55 | |
| CVE-2014-4356 | 2.1 |
Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen.
|
29-08-2017 - 01:34 | 18-09-2014 - 10:55 | |
| CVE-2014-2980 | 4.3 |
Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of service (abort) via an invalid request.
|
29-08-2017 - 01:34 | 28-04-2014 - 14:09 | |
| CVE-2014-4362 | 5.0 |
The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app.
|
29-08-2017 - 01:34 | 18-09-2014 - 10:55 | |
| CVE-2003-1413 | 4.3 |
parse_xml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2009-3937 | 4.9 |
Memory leak in Solaris TCP sockets in Sun OpenSolaris snv_106 through snv_126 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors involving tcp_sendmsg processing "ancillary data."
|
16-11-2009 - 05:00 | 13-11-2009 - 16:30 |