# CVEs published 2015-07-03 75 CVEs were published on July 3, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-4231](https://cve.now/CVE-2015-4231.md): The Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an (no CVSS) - [CVE-2015-4232](https://cve.now/CVE-2015-4232.md): Cisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in (no CVSS) - [CVE-2015-4234](https://cve.now/CVE-2015-4234.md): Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecif (no CVSS) - [CVE-2015-4237](https://cve.now/CVE-2015-4237.md): The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and 9.1(1)SV1(3.1.8) on Nexus devices allows l (no CVSS) - [CVE-2015-4239](https://cve.now/CVE-2015-4239.md): Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device re (no CVSS) - [CVE-2015-3658](https://cve.now/CVE-2015-3658.md): The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8 (no CVSS) - [CVE-2015-3659](https://cve.now/CVE-2015-3659.md): The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used i (no CVSS) - [CVE-2015-3660](https://cve.now/CVE-2015-3660.md): Cross-site scripting (XSS) vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8 (no CVSS) - [CVE-2015-3661](https://cve.now/CVE-2015-3661.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3662](https://cve.now/CVE-2015-3662.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3663](https://cve.now/CVE-2015-3663.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3664](https://cve.now/CVE-2015-3664.md): QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory c (no CVSS) - [CVE-2015-3665](https://cve.now/CVE-2015-3665.md): QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory c (no CVSS) - [CVE-2015-3666](https://cve.now/CVE-2015-3666.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3667](https://cve.now/CVE-2015-3667.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3668](https://cve.now/CVE-2015-3668.md): QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute a (no CVSS) - [CVE-2015-3669](https://cve.now/CVE-2015-3669.md): QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory c (no CVSS) - [CVE-2015-3671](https://cve.now/CVE-2015-3671.md): Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication an (no CVSS) - [CVE-2015-3672](https://cve.now/CVE-2015-3672.md): Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privil (no CVSS) - [CVE-2015-3673](https://cve.now/CVE-2015-3673.md): Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obt (no CVSS) - [CVE-2015-3674](https://cve.now/CVE-2015-3674.md): afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2015-3675](https://cve.now/CVE-2015-3675.md): The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod\_hfs\_apple module, which allows remo (no CVSS) - [CVE-2015-3676](https://cve.now/CVE-2015-3676.md): AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app. (no CVSS) - [CVE-2015-3677](https://cve.now/CVE-2015-3677.md): The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout informati (no CVSS) - [CVE-2015-3678](https://cve.now/CVE-2015-3678.md): AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service (memory corruptio (no CVSS) - [CVE-2015-3679](https://cve.now/CVE-2015-3679.md): Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-3680](https://cve.now/CVE-2015-3680.md): Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-3681](https://cve.now/CVE-2015-3681.md): Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-3682](https://cve.now/CVE-2015-3682.md): Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-3683](https://cve.now/CVE-2015-3683.md): The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context o (no CVSS) - [CVE-2015-3684](https://cve.now/CVE-2015-3684.md): The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitr (no CVSS) - [CVE-2015-3685](https://cve.now/CVE-2015-3685.md): CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS) - [CVE-2015-3686](https://cve.now/CVE-2015-3686.md): CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS) - [CVE-2015-3687](https://cve.now/CVE-2015-3687.md): CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS) - [CVE-2015-3688](https://cve.now/CVE-2015-3688.md): CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS) - [CVE-2015-3689](https://cve.now/CVE-2015-3689.md): CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem (no CVSS) - [CVE-2015-3690](https://cve.now/CVE-2015-3690.md): The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for (no CVSS) - [CVE-2015-3691](https://cve.now/CVE-2015-3691.md): The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute a (no CVSS) - [CVE-2015-3692](https://cve.now/CVE-2015-3692.md): Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being (no CVSS) - [CVE-2015-3693](https://cve.now/CVE-2015-3693.md): Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which mi (no CVSS) - [CVE-2015-3694](https://cve.now/CVE-2015-3694.md): FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2015-3695](https://cve.now/CVE-2015-3695.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3696](https://cve.now/CVE-2015-3696.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3697](https://cve.now/CVE-2015-3697.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3698](https://cve.now/CVE-2015-3698.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3699](https://cve.now/CVE-2015-3699.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3700](https://cve.now/CVE-2015-3700.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3701](https://cve.now/CVE-2015-3701.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3702](https://cve.now/CVE-2015-3702.md): Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a d (no CVSS) - [CVE-2015-3703](https://cve.now/CVE-2015-3703.md): ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memo (no CVSS) - [CVE-2015-3704](https://cve.now/CVE-2015-3704.md): runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which (no CVSS) - [CVE-2015-3705](https://cve.now/CVE-2015-3705.md): IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of ser (no CVSS) - [CVE-2015-3706](https://cve.now/CVE-2015-3706.md): IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of ser (no CVSS) - [CVE-2015-3707](https://cve.now/CVE-2015-3707.md): The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or c (no CVSS) - [CVE-2015-3708](https://cve.now/CVE-2015-3708.md): kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink atta (no CVSS) - [CVE-2015-3709](https://cve.now/CVE-2015-3709.md): Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions (no CVSS) - [CVE-2015-3710](https://cve.now/CVE-2015-3710.md): Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit (no CVSS) - [CVE-2015-3711](https://cve.now/CVE-2015-3711.md): The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a cra (no CVSS) - [CVE-2015-3712](https://cve.now/CVE-2015-3712.md): The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial (no CVSS) - [CVE-2015-3713](https://cve.now/CVE-2015-3713.md): QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2015-3714](https://cve.now/CVE-2015-3714.md): Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypa (no CVSS) - [CVE-2015-3715](https://cve.now/CVE-2015-3715.md): The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle (no CVSS) - [CVE-2015-3716](https://cve.now/CVE-2015-3716.md): Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local ph (no CVSS) - [CVE-2015-3717](https://cve.now/CVE-2015-3717.md): Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attac (no CVSS) - [CVE-2015-3718](https://cve.now/CVE-2015-3718.md): systemstatsd in the System Stats subsystem in Apple OS X before 10.10.4 does not properly interpret data types encountered in interprocess c (no CVSS) - [CVE-2015-3719](https://cve.now/CVE-2015-3719.md): TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2015-3720](https://cve.now/CVE-2015-3720.md): The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive (no CVSS) - [CVE-2015-3721](https://cve.now/CVE-2015-3721.md): The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensiti (no CVSS) - [CVE-2015-3722](https://cve.now/CVE-2015-3722.md): Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service (no CVSS) - [CVE-2015-3723](https://cve.now/CVE-2015-3723.md): CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-3724](https://cve.now/CVE-2015-3724.md): CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-3725](https://cve.now/CVE-2015-3725.md): MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of s (no CVSS) - [CVE-2015-3726](https://cve.now/CVE-2015-3726.md): The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted (1) SIM or (2) (no CVSS) - [CVE-2015-3727](https://cve.now/CVE-2015-3727.md): WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not pr (no CVSS) - [CVE-2015-3728](https://cve.now/CVE-2015-3728.md): The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitra (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-07-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.