Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apple iphone os 7.1.1 vulnerabilities and exploits
(subscribe to this query)
187
VMScore
CVE-2014-4352
Address Book in Apple iOS prior to 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate malicious users to obtain sensitive information by obtaining this UID.
Apple Iphone Os 7.0.6
Apple Iphone Os 7.0.5
Apple Iphone Os
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
Apple Iphone Os 7.1.1
Apple Iphone Os 7.1
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
516
VMScore
CVE-2014-4354
Apple iOS prior to 8 enables Bluetooth during all upgrade actions, which makes it easier for remote malicious users to bypass intended access restrictions via a Bluetooth session.
Apple Iphone Os 7.0
Apple Iphone Os 7.1.1
Apple Iphone Os 7.0.6
Apple Iphone Os 7.1
Apple Iphone Os
Apple Iphone Os 7.0.5
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
445
VMScore
CVE-2014-4361
The Home & Lock Screen subsystem in Apple iOS prior to 8 does not properly restrict the private API for app prominence, which allows malicious users to determine the frontmost app by leveraging access to a crafted background app.
Apple Iphone Os 7.0.5
Apple Iphone Os 7.0.4
Apple Iphone Os
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
Apple Iphone Os 7.0.6
Apple Iphone Os 7.1.1
Apple Iphone Os 7.1
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
445
VMScore
CVE-2014-4366
Mail in Apple iOS prior to 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote malicious users to obtain sensitive cleartext information by sniffing the network.
Apple Iphone Os 7.0
Apple Iphone Os 7.0.1
Apple Iphone Os
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.5
Apple Iphone Os 7.1
Apple Iphone Os 7.1.1
Apple Iphone Os 7.0.6
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.3
187
VMScore
CVE-2014-4367
Apple iOS prior to 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate malicious users to launch unintended calls by speaking a telephone number.
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
Apple Iphone Os 7.1.1
Apple Iphone Os 7.0.5
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.6
Apple Iphone Os 7.1
Apple Iphone Os
614
VMScore
CVE-2014-4368
The Accessibility subsystem in Apple iOS prior to 8 allows malicious users to interfere with screen locking via vectors related to AssistiveTouch events.
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.6
Apple Iphone Os 7.0.5
Apple Iphone Os 7.1
Apple Iphone Os
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
Apple Iphone Os 7.1.1
169
VMScore
CVE-2014-4384
Directory traversal vulnerability in the App Installation feature in Apple iOS prior to 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle.
Apple Iphone Os 7.0.5
Apple Iphone Os 7.0.4
Apple Iphone Os
Apple Iphone Os 7.0.6
Apple Iphone Os 7.1.1
Apple Iphone Os 7.1
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
169
VMScore
CVE-2014-4386
Race condition in the App Installation feature in Apple iOS prior to 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0
Apple Iphone Os 7.1.1
Apple Iphone Os 7.0.6
Apple Iphone Os 7.0.5
Apple Iphone Os 7.1
Apple Iphone Os
383
VMScore
CVE-2014-4409
WebKit in Apple iOS prior to 8 makes it easier for remote malicious users to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing.
Apple Iphone Os 7.0.6
Apple Iphone Os 7.1.1
Apple Iphone Os 7.1
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
Apple Iphone Os 7.0.5
Apple Iphone Os 7.0.4
Apple Iphone Os
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
383
VMScore
CVE-2014-4423
The Accounts subsystem in Apple iOS prior to 8 allows malicious users to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.
Apple Iphone Os 7.0.6
Apple Iphone Os 7.0.5
Apple Iphone Os
Apple Iphone Os 7.1.1
Apple Iphone Os 7.1
Apple Iphone Os 7.0.4
Apple Iphone Os 7.0.3
Apple Iphone Os 7.0.2
Apple Iphone Os 7.0.1
Apple Iphone Os 7.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scripting
CVE-2024-5158
XML external entity
CVE-2024-4262
CVE-2024-2036
CVE-2024-4985
CVE-2024-21791
remote attackers
CVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »