Browse CVEs

HIGH 7.5 CVE-2004-0167 DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media. Mac Os X No fix yet Fix from $1,9502004-03-15 HIGH 10.0 CVE-2004-0092 Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact. Mac Os X No fix yet Fix from $1,9502004-03-03 MEDIUM 5.0 CVE-2004-0086 Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085. Mac Os X No fix yet Fix from $1,6002004-03-03 MEDIUM 5.0 CVE-2003-0975 Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with… Safari Mitigation only Fix from $1,6002003-12-15 HIGH 7.2 CVE-2001-1411 Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. Mac Os X Mitigation only Fix from $1,9502003-11-17 HIGH 10.0 CVE-2003-0421 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. … Darwin Streaming Server Mitigation only Fix from $1,9502003-08-27 HIGH 10.0 CVE-2003-0426 The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allow… Darwin Streaming Server No fix yet Fix from $1,9502003-08-27 MEDIUM 5.0 CVE-2003-0422 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.… Darwin Streaming Server Mitigation only Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0423 parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via th… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0424 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0425 Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ..… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 HIGH 7.6 CVE-2003-0270EPSS 11% The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authe… 802.11n Mitigation only Fix from $1,9502003-06-16 MEDIUM 5.0 CVE-2003-0355 Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof … Safari Mitigation only Fix from $1,6002003-06-09 HIGH 7.2 CVE-2003-0171 DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitr… Mac Os X Mitigation only Fix from $1,9502003-05-05 MEDIUM 6.4 CVE-2003-0198 Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files. Mac Os X Mitigation only Fix from $1,6002003-05-05 HIGH 7.5 CVE-2003-0050EPSS 69% parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary… Darwin Streaming Server Mitigation only Fix from $1,9502003-03-07 HIGH 7.5 CVE-2003-0054 Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request… Darwin Streaming Server Mitigation only Fix from $1,9502003-03-07 HIGH 7.5 CVE-2003-0055 Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remo… Quicktime Darwin Mp3 Broadcaster Mitigation only Fix from $1,9502003-03-07 MEDIUM 5.0 CVE-2003-0051 parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physic… Darwin Streaming Server Mitigation only Fix from $1,6002003-03-07 MEDIUM 5.0 CVE-2003-0052 parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary di… Darwin Streaming Server Mitigation only Fix from $1,6002003-03-07 HIGH 7.5 CVE-2002-2373 The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which … Tcp Ip Configuration Utility Mitigation only Fix from $1,9502002-12-31 MEDIUM 5.0 CVE-2002-2326 The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext whe… Mac Os X Mitigation only Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-0676 SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitra… Mac Os X No fix yet Fix from $1,9502002-07-11 HIGH 7.5 CVE-2001-1531 Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachm… Claris Emailer Mitigation only Fix from $1,9502001-12-31 MEDIUM 5.0 CVE-2001-1575 Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of servic… Personal Web Sharing Mitigation only Fix from $1,6002001-12-31 HIGH 7.5 CVE-2001-0720 Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to b… Mac Os X Mitigation only Fix from $1,9502001-12-06 MEDIUM 5.0 CVE-2001-0649EPSS 5% Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request. Personal Web Sharing No fix yet Fix from $1,6002001-09-20 HIGH 7.5 CVE-2001-1446 Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers … Mac Os X Mitigation only Fix from $1,9502001-09-11 HIGH 7.2 CVE-2001-0102 "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively r… macOS No fix yet Fix from $1,9502001-02-12 MEDIUM 5.0 CVE-2000-0346 AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server. Appleshare Mitigation only Fix from $1,6002000-05-02