Search Results | AttackerKB

287 Total Results

Displaying 131-140 of 287

Attacker Value

Unknown

CVE-2015-1126

Disclosure Date: April 10, 2015 (last updated October 05, 2023)

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors.

Attacker Value

Unknown

CVE-2015-1122

Disclosure Date: April 10, 2015 (last updated October 05, 2023)

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Attacker Value

Unknown

CVE-2015-1127

Disclosure Date: April 10, 2015 (last updated October 05, 2023)

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries.

Attacker Value

Unknown

CVE-2015-1120

Disclosure Date: April 10, 2015 (last updated October 05, 2023)

Attacker Value

Unknown

CVE-2015-2808

Disclosure Date: April 01, 2015 (last updated October 05, 2023)

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Attacker Value