Browse CVEs

MEDIUM 6.8 CVE-2010-1832 Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitra… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 6.8 CVE-2010-1833 Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memo… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 6.8 CVE-2010-1836 Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or ca… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 6.8 CVE-2010-1837 CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 6.0 CVE-2010-1829 Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitr… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 5.8 CVE-2010-1834 CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to t… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 5.0 CVE-2010-1830 AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows rem… Mac Os X Patch available Fix from $1,6002010-11-15 MEDIUM 5.0 CVE-2010-1828 AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemo… Mac Os X Patch available Fix from $1,6002010-11-15 CRITICAL 9.8 CVE-2010-1378 OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authen… Mac Os X 10.6.5+ Fix from $2,3002010-11-15 HIGH 8.8 CVE-2010-1822 WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspe… Safari 4.1.3 / 5.0.3+ Fix from $1,9502010-10-04 MEDIUM 6.8 CVE-2010-1820 Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass t… Mac Os X Patch available Fix from $1,6002010-09-21 HIGH 9.3 CVE-2010-1806EPSS 5% Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denia… Safari Patch available Fix from $1,9502010-09-10 HIGH 9.3 CVE-2010-1807EPSS 61% WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-poi… Safari after 2.1 Fix from $1,9502010-09-10 MEDIUM 6.9 CVE-2010-1805 Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Troj… Safari Patch available Fix from $1,6002010-09-10 HIGH 10.0 CVE-2010-1809 The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with… Iphone Os 4.1+ Fix from $1,9502010-09-09 MEDIUM 6.8 CVE-2010-1811 ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory c… Iphone Os 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1813EPSS 10% WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory co… Iphone Os 4.1+ Fix from $1,6002010-09-09 MEDIUM 6.8 CVE-2010-1817 Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial o… Iphone Os 4.1+ Fix from $1,6002010-09-09 HIGH 7.8 CVE-2010-3190EPSS 9% Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1,… Itunes Patch available Fix from $1,9502010-08-31 MEDIUM 6.8 CVE-2010-1801 Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of… Coregraphics Patch available Fix from $1,6002010-08-25 MEDIUM 6.8 CVE-2010-1808 Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cau… Apple Type Services Patch available Fix from $1,6002010-08-25 MEDIUM 6.4 CVE-2010-1802 libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-… Libsecurity Patch available Fix from $1,6002010-08-25 MEDIUM 5.0 CVE-2010-1800 CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a conn… Cfnetwork Patch available Fix from $1,6002010-08-25 HIGH 9.3 CVE-2010-1795 Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote atta… Itunes Mitigation only Fix from $1,9502010-08-20 MEDIUM 6.9 CVE-2010-1768 Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file o… Itunes after 9.0.3 Fix from $1,6002010-08-20 HIGH 10.0 CVE-2010-1386 page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has un… Webkit Mitigation only Fix from $1,9502010-08-19 HIGH 10.0 CVE-2010-1760 loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials duri… Webkit Mitigation only Fix from $1,9502010-08-19 HIGH 9.3 CVE-2010-1797EPSS 31% Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in Fre… Iphone Os No fix yet Fix from $1,9502010-08-16 MEDIUM 6.9 CVE-2010-2973 Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privil… Iphone Os No fix yet Fix from $1,6002010-08-05 HIGH 9.3 CVE-2010-1784EPSS 6% The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 an… Safari after 5.0 Fix from $1,9502010-07-30