Browse CVEs

HIGH 10.0 CVE-2008-2303EPSS 13% Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a … Safari Mitigation only Fix from $1,9502008-07-14 HIGH 9.3 CVE-2008-2317EPSS 8% WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitr… Safari Mitigation only Fix from $1,9502008-07-14 MEDIUM 6.8 CVE-2008-2304EPSS 6% Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execu… Core Image Fun House after 2.0 Fix from $1,6002008-07-14 MEDIUM 5.0 CVE-2008-2318 The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remo… Xcode after 3.0 Fix from $1,6002008-07-14 HIGH 7.6 CVE-2008-2311 Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attac… Mac Os X Patch available Fix from $1,9502008-07-01 MEDIUM 6.8 CVE-2008-2309 Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a… Mac Os X Patch available Fix from $1,6002008-07-01 MEDIUM 6.8 CVE-2008-2310 Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denia… Mac Os X after 10.5.3 Fix from $1,6002008-07-01 HIGH 9.3 CVE-2008-2306 Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows re… Safari after 3.1.1 Fix from $1,9502008-06-23 HIGH 9.3 CVE-2008-2307EPSS 7% Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 1… Safari after 3.1.1 Fix from $1,9502008-06-23 HIGH 7.2 CVE-2008-2830 Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of sc… Mac Os X No fix yet Fix from $1,9502008-06-23 HIGH 9.3 CVE-2008-2540EPSS 8% Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, w… Safari 3.1.2+ Fix from $1,9502008-06-03 HIGH 10.0 CVE-2008-1030 Integer overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple Mac OS X before 10.5.3 allows context-dependent atta… Mac Os X Mitigation only Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1028 Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial o… Mac Os X Mitigation only Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1031EPSS 6% CoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Mac Os X Mitigation only Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1034EPSS 8% Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (applic… Mac Os X after 10.4 Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1574EPSS 7% Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (applicati… Mac Os X Patch available Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1575EPSS 6% Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execu… Mac Os X Patch available Fix from $1,9502008-06-02 HIGH 9.3 CVE-2008-1577EPSS 6% Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code… Mac Os X Patch available Fix from $1,9502008-06-02 HIGH 7.1 CVE-2008-1573 The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory cont… Mac Os X after 10.5.2 Fix from $1,9502008-06-02 MEDIUM 6.8 CVE-2008-1032 Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a… Mac Os X Patch available Fix from $1,6002008-06-02 MEDIUM 6.8 CVE-2008-1576 Mail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly initialize memory, which might allow remote attackers to exec… Mac Os X Patch available Fix from $1,6002008-06-02 MEDIUM 5.0 CVE-2008-1571 Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary… Mac Os X Patch available Fix from $1,6002008-06-02 MEDIUM 5.0 CVE-2008-1579 Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message pr… Mac Os X Patch available Fix from $1,6002008-06-02 MEDIUM 5.0 CVE-2008-1999 Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the author… Safari Mitigation only Fix from $1,6002008-04-28 MEDIUM 6.8 CVE-2008-1024 Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arb… Safari Mitigation only Fix from $1,6002008-04-17 MEDIUM 6.8 CVE-2008-1026 Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allo… Safari Patch available Fix from $1,6002008-04-17 MEDIUM 6.8 CVE-2008-1374 Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute … Cups after 1.3.11 Fix from $1,6002008-04-04 MEDIUM 6.8 CVE-2008-1010 Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in J… Safari Patch available Fix from $1,6002008-03-19 HIGH 10.0 CVE-2008-0053EPSS 8% Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a craft… Cups after 1.3.5 Fix from $1,9502008-03-18 HIGH 8.5 CVE-2008-1000 Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to … Mac Os X Patch available Fix from $1,9502008-03-18