|
3491
|
-
4.6
|
MEDIUM
|
Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, …
|
CWE-399
Resource Management Errors
|
CVE-2010-0038
|
cpe:2.3:o:apple:iphone_os:3.1.2:-
cpe:2.3:o:apple:iphone_os:3.1.2:*
cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:…
|
|
|
|
|
2021-05-23 09:52
2010-02-4
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3492
|
-
6.8
|
MEDIUM
|
The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS req…
|
CWE-352
Origin Validation Error
|
CVE-2009-2816
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
|
|
4.0
|
2026-04-23 09:35
2009-11-14
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3493
|
-
7.5
|
HIGH
|
iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certif…
|
CWE-310
Cryptographic Issues
|
CVE-2009-3273
|
cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:3.0.1:-
cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-09-22
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3494
|
-
4.3
|
MEDIUM
|
Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.
|
CWE-20
Improper Input Validation
|
CVE-2009-3271
|
cpe:2.3:o:apple:iphone_os:3.0.1:*
|
|
|
|
|
2026-04-23 09:35
2009-09-22
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3495
|
-
7.8
|
HIGH
|
The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and serv…
|
CWE-399
Resource Management Errors
|
CVE-2009-2815
|
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:2.2:*
cpe:2.3:o:apple:iphone_os:2.2.1:*
cpe:2.3:o:ap…
|
|
3.0.1
|
|
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3496
|
-
5.0
|
MEDIUM
|
The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote…
|
CWE-200
Information Exposure
|
CVE-2009-2797
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
|
|
3.1.1
3.1
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3497
|
-
2.1
|
LOW
|
The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the pas…
|
CWE-200
Information Exposure
|
CVE-2009-2796
|
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:3.0.1:*
|
|
|
|
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3498
|
-
7.2
|
HIGH
|
Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access ar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-2795
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
|
|
3.1.1
3.1
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3499
|
-
4.6
|
MEDIUM
|
The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows loc…
|
CWE-362
Race Condition
|
CVE-2009-2794
|
cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:3.0.1:*
cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3500
|
-
2.1
|
LOW
|
The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensiti…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2207
|
cpe:2.3:o:apple:iphone_os:3.0:-
cpe:2.3:o:apple:iphone_os:3.0:*
cpe:2.3:o:apple:iphone_os:3.0.1:*
|
|
|
|
|
2026-04-23 09:35
2009-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|