CVE-2015-3759Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink.
4.6 MOYENNE
CVE-2015-3758UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafte…
4.3 MOYENNE
CVE-2015-3757Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane.
2.1 FAIBLE
CVE-2015-3756The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrar…
2.1 FAIBLE
CVE-2015-3755WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via…
4.3 MOYENNE
CVE-2015-3754The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, whic…
4.3 MOYENNE
CVE-2015-3753WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS ele…
5.0 MOYENNE
CVE-2015-3752The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not …
5.0 MOYENNE
CVE-2015-3751WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Po…
5.0 MOYENNE
CVE-2015-3750WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HS…
6.4 MOYENNE
CVE-2015-3749WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3748WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3747WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3746WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3745WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3744WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3743WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3742WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3741WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3740WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3739WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3738WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3737WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3736WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3735WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3734WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3733WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3732WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3731WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3730WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of se…
6.8 MOYENNE
CVE-2015-3729Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which…
4.3 MOYENNE
CVE-2013-7422Les versions de Perl antérieures à 5.20, y compris celles intégrées aux anciennes versions de macOS, sont affectées par une faille dans la manière dont les expressions régulières g…
7.5 ÉLEVÉE
CVE-2015-4496Les versions de Mozilla Firefox antérieures à 38.0 sont concernées en raison de la manière dont le navigateur gère les métadonnées des vidéos MPEG-4. Un attaquant distant non authe…
9.3 ÉLEVÉE
CVE-2015-4493Les versions de Mozilla Firefox antérieures à la 40.0 et ESR 38.2 sont affectées par une faille de corruption de mémoire lors du traitement de certaines données vidéo MPEG-4. Un at…
9.3 ÉLEVÉE
CVE-2015-4492Les versions 39 et antérieures du navigateur Firefox sont affectées par une faille de corruption de mémoire. Un attaquant distant peut exécuter du code arbitraire sur votre machine…
7.5 ÉLEVÉE
CVE-2015-4491Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux,…
6.8 MOYENNE
CVE-2015-4490The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob, dat…
4.3 MOYENNE
CVE-2015-4489Les versions de Mozilla Firefox antérieures à 40.0, ESR 38.2 et Firefox OS 2.2 sont affectées par une faille de corruption de mémoire. Un attaquant distant peut déclencher cette vu…
7.5 ÉLEVÉE
CVE-2015-4488Les anciennes versions de Mozilla Firefox et de Firefox OS sont affectées par une erreur de gestion de la mémoire lors du traitement de certaines animations de style. Un attaquant …
7.5 ÉLEVÉE
CVE-2015-4487Les versions de Mozilla Firefox antérieures à 40.0, ESR 38.2 et Firefox OS 2.2 sont affectées par une faille de corruption de mémoire. Un attaquant distant peut déclencher ce probl…
7.5 ÉLEVÉE
CVE-2015-4486Les versions de Mozilla Firefox antérieures à 40.0 et ESR 38.2 sont affectées en raison d'une faille dans la gestion des fichiers vidéo WebM. Un attaquant distant peut exécuter du …
10.0 ÉLEVÉE
CVE-2015-4485Les versions de Mozilla Firefox antérieures à la 40.0 (y compris l'ESR 38.x) sont sensibles à une faille de corruption de mémoire lors du traitement de fichiers vidéo WebM. Un atta…
10.0 ÉLEVÉE
CVE-2015-4484The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to caus…
5.0 MOYENNE
CVE-2015-4483Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.
4.3 MOYENNE
CVE-2015-4482mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) v…
4.6 MOYENNE
CVE-2015-4481Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and cons…
3.3 FAIBLE
CVE-2015-4480Les versions antérieures de Mozilla Firefox (précédant la version 40.0 ou ESR 38.2) sont sensibles à une erreur de mémoire lors du traitement de certains fichiers vidéo MPEG-4. Un …
9.3 ÉLEVÉE
CVE-2015-4479Les versions plus anciennes de Mozilla Firefox (antérieures à 40.0 et ESR 38.2) sont concernées en raison de la manière dont elles traitent les données vidéo MPEG-4. Un attaquant d…
10.0 ÉLEVÉE
CVE-2015-4478Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypas…
5.0 MOYENNE
CVE-2015-4477Les versions de Mozilla Firefox antérieures à la 40.0 sont affectées par une faille de corruption de mémoire dans la fonctionnalité de lecture multimédia de l'API Web Audio. Un att…
10.0 ÉLEVÉE