|
278421
|
- |
|
apple
|
mac_os_x
|
Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-4431
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278422
|
- |
|
apple
|
mac_os_x
|
CoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in the unlocked state, which makes it easier for physically proximate attackers to obtain cleartext data…
|
CWE-310
Cryptographic Issues
|
CVE-2014-4430
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278423
|
- |
|
apple
|
mac_os_x
|
Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attackers to spoof a device by leveraging previous pairing.
|
CWE-310
Cryptographic Issues
|
CVE-2014-4428
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278424
|
- |
|
apple
|
mac_os_x
|
App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-4427
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278425
|
- |
|
apple
|
mac_os_x
|
AFP File Server in Apple OS X before 10.10 allows remote attackers to discover the network addresses of all interfaces via an unspecified command to one interface.
|
CWE-200
Information Exposure
|
CVE-2014-4426
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278426
|
- |
|
apple
|
mac_os_x
|
CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtai…
|
CWE-287
Improper Authentication
|
CVE-2014-4425
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278427
|
- |
|
apple
|
mac_os_x
|
Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service (universal Push Notification outage) via a web site that triggers an uncaught SafariNotificationAgent exception …
|
CWE-20
Improper Input Validation
|
CVE-2014-4417
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278428
|
- |
|
apple
|
mac_os_x
|
The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to bypass intended app-author restrictions …
|
CWE-310
Cryptographic Issues
|
CVE-2014-4391
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278429
|
- |
|
apple
|
mac_os_x
|
Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio samples in an m4a file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2014-4351
|
2024-11-21 11:10 |
2014-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278430
|
- |
|
textpattern
|
textpattern
|
Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to setup/index.php.
|
CWE-79
Cross-site Scripting
|
CVE-2014-4737
|
2024-11-21 11:10 |
2014-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|