|
3601
|
-
10.0
|
HIGH
|
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary cod…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-3529
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
|
|
3.0
|
2026-04-23 09:35
2008-09-13
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3602
|
-
9.3
|
HIGH
|
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application…
|
CWE-399
Resource Management Errors
|
CVE-2008-3632
|
cpe:2.3:o:apple:iphone_os:1.1.2:*
cpe:2.3:o:apple:iphone_os:1.1.1:*
|
|
|
|
|
2026-04-23 09:35
2008-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3603
|
9.8
7.5
|
CRITICAL
Network
|
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP con…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2008-3612
|
cpe:2.3:o:apple:iphone_os:*:*
|
2.0.0
|
2.0.2
|
|
|
2026-04-23 09:35
2008-09-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3604
|
6.5
4.3
|
MEDIUM
Network
|
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU cons…
|
CWE-776
XML Entity Expansion
|
CVE-2008-3281
|
cpe:2.3:o:apple:iphone_os:*:*
|
1.0.0
|
|
|
3.0
|
2026-04-23 09:35
2008-08-28
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3605
|
-
4.6
|
MEDIUM
|
Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency c…
|
NVD-CWE-Other
|
CVE-2008-0034
|
cpe:2.3:o:apple:iphone_os:1.1.2:*
cpe:2.3:o:apple:iphone_os:1.1.1:*
cpe:2.3:o:apple:iphone_os:1.0.2:*
cpe:2.3:…
|
|
|
|
|
2026-04-23 09:35
2008-01-16
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3606
|
-
7.5
|
HIGH
|
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Proto…
|
CWE-20
Improper Input Validation
|
CVE-2007-3753
|
cpe:2.3:o:apple:iphone_os:1.0.2:*
cpe:2.3:o:apple:iphone_os:1.0.1:*
|
|
|
|
|
2026-04-23 09:35
2007-09-28
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3607
|
-
4.3
|
MEDIUM
|
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-…
|
CWE-287
Improper Authentication
|
CVE-2007-3754
|
cpe:2.3:o:apple:iphone_os:1.0.2:*
cpe:2.3:o:apple:iphone_os:1.0.1:*
|
|
|
|
|
2026-04-23 09:35
2007-09-28
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3608
|
-
4.3
|
MEDIUM
|
Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing…
|
CWE-20
Improper Input Validation
|
CVE-2007-3755
|
cpe:2.3:o:apple:iphone_os:1.0.2:*
cpe:2.3:o:apple:iphone_os:1.0.1:*
|
|
|
|
|
2026-04-23 09:35
2007-09-28
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3609
|
-
9.3
|
HIGH
|
Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, …
|
CWE-119
NVD-CWE-noinfo
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-3944
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
1.0.0
|
|
|
2026-04-23 09:35
2007-07-24
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3610
|
-
4.3
|
MEDIUM
|
Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages ou…
|
CWE-79
CWE-362
Cross-site Scripting
Race Condition
|
CVE-2007-2400
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
1.0
|
|
|
2026-04-23 09:35
2007-06-26
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|