Vulnerability index

Browse CVEs

6,692 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mac Os X MEDIUM 6.8
CVE-2010-1832

Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitra…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 6.8
CVE-2010-1833

Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memo…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 6.8
CVE-2010-1836

Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or ca…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 6.8
CVE-2010-1837

CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 6.0
CVE-2010-1829

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitr…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 5.8
CVE-2010-1834

CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to t…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 5.0
CVE-2010-1830

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows rem…

Patch available
Fix from $1,600 2010-11-15
Mac Os X MEDIUM 5.0
CVE-2010-1828

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemo…

Patch available
Fix from $1,600 2010-11-15
Mac Os X CRITICAL 9.8
CVE-2010-1378

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authen…

Fix: 10.6.5+
Fix from $2,300 2010-11-15
Safari HIGH 8.8
CVE-2010-1822

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspe…

Fix: 4.1.3 / 5.0.3+
Fix from $1,950 2010-10-04
Mac Os X MEDIUM 6.8
CVE-2010-1820

Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass t…

Patch available
Fix from $1,600 2010-09-21
Safari HIGH 9.3
CVE-2010-1806EPSS 5%

Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denia…

Patch available
Fix from $1,950 2010-09-10
Safari HIGH 9.3
CVE-2010-1807EPSS 61%

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-poi…

Fix: after 2.1
Fix from $1,950 2010-09-10
Safari MEDIUM 6.9
CVE-2010-1805

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Troj…

Patch available
Fix from $1,600 2010-09-10
Iphone Os HIGH 10.0
CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with…

Fix: 4.1+
Fix from $1,950 2010-09-09
Iphone Os MEDIUM 6.8
CVE-2010-1811

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

Fix: 4.1+
Fix from $1,600 2010-09-09
Iphone Os MEDIUM 6.8
CVE-2010-1813EPSS 10%

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

Fix: 4.1+
Fix from $1,600 2010-09-09
Iphone Os MEDIUM 6.8
CVE-2010-1817

Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial o…

Fix: 4.1+
Fix from $1,600 2010-09-09
Itunes HIGH 7.8
CVE-2010-3190EPSS 9%

Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1,…

Patch available
Fix from $1,950 2010-08-31
Coregraphics MEDIUM 6.8
CVE-2010-1801

Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of…

Patch available
Fix from $1,600 2010-08-25
Apple Type Services MEDIUM 6.8
CVE-2010-1808

Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cau…

Patch available
Fix from $1,600 2010-08-25
Libsecurity MEDIUM 6.4
CVE-2010-1802

libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-…

Patch available
Fix from $1,600 2010-08-25
Cfnetwork MEDIUM 5.0
CVE-2010-1800

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a conn…

Patch available
Fix from $1,600 2010-08-25
Itunes HIGH 9.3
CVE-2010-1795

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote atta…

Mitigation only
Fix from $1,950 2010-08-20
Itunes MEDIUM 6.9
CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file o…

Fix: after 9.0.3
Fix from $1,600 2010-08-20
Webkit HIGH 10.0
CVE-2010-1386

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has un…

Mitigation only
Fix from $1,950 2010-08-19
Webkit HIGH 10.0
CVE-2010-1760

loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials duri…

Mitigation only
Fix from $1,950 2010-08-19
Iphone Os HIGH 9.3
CVE-2010-1797EPSS 31%

Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in Fre…

No fix yet
Fix from $1,950 2010-08-16
Iphone Os MEDIUM 6.9
CVE-2010-2973

Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privil…

No fix yet
Fix from $1,600 2010-08-05
Safari HIGH 9.3
CVE-2010-1784EPSS 6%

The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 an…

Fix: after 5.0
Fix from $1,950 2010-07-30