|
2761
|
-
6.8
|
MEDIUM
|
Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5829
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2762
|
-
5.0
|
MEDIUM
|
WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference via vectors involving a (1) custom event, (2) message event, or (3) pop state even…
|
CWE-200
Information Exposure
|
CVE-2015-5827
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2763
|
-
4.3
|
MEDIUM
|
WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass…
|
CWE-284
Improper Access Control
|
CVE-2015-5826
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2764
|
-
4.3
|
MEDIUM
|
WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movem…
|
CWE-200
Information Exposure
|
CVE-2015-5825
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2765
|
-
4.3
|
MEDIUM
|
The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change, which allows man-in-the-middle a…
|
CWE-310
Cryptographic Issues
|
CVE-2015-5824
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2766
|
-
6.8
|
MEDIUM
|
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5823
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2767
|
-
6.8
|
MEDIUM
|
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5822
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2768
|
-
6.8
|
MEDIUM
|
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted we…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5821
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2769
|
-
4.3
|
MEDIUM
|
WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime://, or (3) facetime-audio:// URL.
|
CWE-20
Improper Input Validation
|
CVE-2015-5820
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2770
|
-
6.8
|
MEDIUM
|
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted we…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5819
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.4.1
|
|
|
2024-11-21 11:33
2015-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|