|
269231
|
- |
|
apple
|
safari iphone_os
|
WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference via vectors involving a (1) custom event, (2) message event, or (3) pop state even…
|
CWE-200
Information Exposure
|
CVE-2015-5827
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269232
|
- |
|
apple
|
safari iphone_os
|
WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass…
|
CWE-284
Improper Access Control
|
CVE-2015-5826
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269233
|
- |
|
apple
|
safari iphone_os
|
WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movem…
|
CWE-200
Information Exposure
|
CVE-2015-5825
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269234
|
- |
|
apple
|
watchos mac_os_x iphone_os
|
The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change, which allows man-in-the-middle a…
|
CWE-310
Cryptographic Issues
|
CVE-2015-5824
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269235
|
- |
|
apple
|
iphone_os itunes safari
|
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5823
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269236
|
- |
|
apple
|
safari iphone_os itunes
|
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5822
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269237
|
- |
|
apple
|
safari itunes iphone_os
|
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted we…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5821
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269238
|
- |
|
apple
|
safari iphone_os
|
WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime://, or (3) facetime-audio:// URL.
|
CWE-20
Improper Input Validation
|
CVE-2015-5820
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269239
|
- |
|
apple
|
itunes safari iphone_os
|
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted we…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5819
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269240
|
- |
|
apple
|
itunes iphone_os safari
|
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted we…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5818
|
2024-11-21 11:33 |
2015-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|