- EPSS 3.04%
- Veröffentlicht 17.11.2015 15:59:16
- Zuletzt bearbeitet 12.04.2025 10:46:40
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
CVE-2015-7015
- EPSS 1.16%
- Veröffentlicht 23.10.2015 21:59:49
- Zuletzt bearbeitet 12.04.2025 10:46:40
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.
CVE-2015-7006
- EPSS 1.26%
- Veröffentlicht 23.10.2015 21:59:41
- Zuletzt bearbeitet 12.04.2025 10:46:40
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.
CVE-2015-6996
- EPSS 6.12%
- Veröffentlicht 23.10.2015 21:59:37
- Zuletzt bearbeitet 12.04.2025 10:46:40
IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-6989
- EPSS 1%
- Veröffentlicht 23.10.2015 21:59:31
- Zuletzt bearbeitet 12.04.2025 10:46:40
Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.
CVE-2015-6978
- EPSS 3.77%
- Veröffentlicht 23.10.2015 21:59:25
- Zuletzt bearbeitet 12.04.2025 10:46:40
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-20...
CVE-2015-6974
- EPSS 1.08%
- Veröffentlicht 23.10.2015 21:59:22
- Zuletzt bearbeitet 12.04.2025 10:46:40
IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-5942
- EPSS 1.87%
- Veröffentlicht 23.10.2015 21:59:18
- Zuletzt bearbeitet 12.04.2025 10:46:40
FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927...
CVE-2015-5939
- EPSS 2.51%
- Veröffentlicht 23.10.2015 21:59:16
- Zuletzt bearbeitet 12.04.2025 10:46:40
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-201...
CVE-2015-5937
- EPSS 2.51%
- Veröffentlicht 23.10.2015 21:59:14
- Zuletzt bearbeitet 12.04.2025 10:46:40
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-201...