CVE-2014-4357
- EPSS 0.08%
- Veröffentlicht 18.09.2014 10:55:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log.
CVE-2014-4364
- EPSS 0.5%
- Veröffentlicht 18.09.2014 10:55:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryp...
CVE-2014-1367
- EPSS 1.58%
- Veröffentlicht 01.07.2014 10:17:27
- Zuletzt bearbeitet 12.04.2025 10:46:40
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft...
CVE-2014-1368
- EPSS 1.58%
- Veröffentlicht 01.07.2014 10:17:27
- Zuletzt bearbeitet 12.04.2025 10:46:40
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft...
CVE-2014-1382
- EPSS 3.32%
- Veröffentlicht 01.07.2014 10:17:27
- Zuletzt bearbeitet 12.04.2025 10:46:40
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft...
CVE-2014-1383
- EPSS 0.15%
- Veröffentlicht 01.07.2014 10:17:27
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors.
CVE-2014-1355
- EPSS 0.06%
- Veröffentlicht 01.07.2014 10:17:26
- Zuletzt bearbeitet 12.04.2025 10:46:40
The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service (NULL pointer dereference and reboot) via crafted API argument...
- EPSS 3.06%
- Veröffentlicht 01.07.2014 10:17:26
- Zuletzt bearbeitet 12.04.2025 10:46:40
Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.
- EPSS 3.06%
- Veröffentlicht 01.07.2014 10:17:26
- Zuletzt bearbeitet 12.04.2025 10:46:40
Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.
- EPSS 3.19%
- Veröffentlicht 01.07.2014 10:17:26
- Zuletzt bearbeitet 12.04.2025 10:46:40
Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.