cve.nowby Sazabi

CVEs published April 10, 2015

79 CVEs were published on April 10, 2015: 0 critical, 1 high. 1 is now in CISA KEV.

Published: 79
Critical: 0
High: 1
Medium: 0
Low: 0
Unrated: 78
Now in CISA KEV: 1
Fix available: 0

High 1

CVE-2015-1130The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privilegHigh · 7.8KEVApr 10, 2015

Medium, low and unrated 78

CVE-2015-2247Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, cause human…UnratedApr 10, 2015
CVE-2013-7436noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this…UnratedApr 10, 2015
CVE-2015-1085AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for…UnratedApr 10, 2015
CVE-2015-1086The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows…UnratedApr 10, 2015
CVE-2015-1087Directory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read arbitrary files via a crafted relative path.UnratedApr 10, 2015
CVE-2015-1088CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attackers to execute…UnratedApr 10, 2015
CVE-2015-1089CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP…UnratedApr 10, 2015
CVE-2015-1090CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response to a Safari…UnratedApr 10, 2015
CVE-2015-1091The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during…UnratedApr 10, 2015
CVE-2015-1092NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external…UnratedApr 10, 2015
CVE-2015-1093FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of…UnratedApr 10, 2015
CVE-2015-1094IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory…UnratedApr 10, 2015
CVE-2015-1095IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute…UnratedApr 10, 2015
CVE-2015-1096IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information…UnratedApr 10, 2015
CVE-2015-1097IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory…UnratedApr 10, 2015
CVE-2015-1098iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service…UnratedApr 10, 2015
CVE-2015-1099Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV…UnratedApr 10, 2015
CVE-2015-1100The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service…UnratedApr 10, 2015
CVE-2015-1101The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbitrary code in a…UnratedApr 10, 2015
CVE-2015-1102The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows…UnratedApr 10, 2015
CVE-2015-1103The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT…UnratedApr 10, 2015
CVE-2015-1104The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet…UnratedApr 10, 2015
CVE-2015-1105The TCP implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly…UnratedApr 10, 2015
CVE-2015-1106The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by…UnratedApr 10, 2015
CVE-2015-1107The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication…UnratedApr 10, 2015

Show all 78 entriesShow fewer entries