Browse CVEs

HIGH 7.5 CVE-2003-0514EPSS 5% Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory trav… Safari No fix yet Fix from $1,9502004-04-15 HIGH 10.0 CVE-2003-1009 Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server infor… Mac Os X Patch available Fix from $1,9502004-03-29 HIGH 7.5 CVE-2003-0601 Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, w… Mac Os X Server Patch available Fix from $1,9502004-03-29 HIGH 7.2 CVE-2003-1006 Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute a… Mac Os X Patch available Fix from $1,9502004-03-29 HIGH 7.2 CVE-2003-1011 Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the sy… Mac Os X Patch available Fix from $1,9502004-03-29 MEDIUM 5.0 CVE-2003-1007 AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact. Mac Os X Patch available Fix from $1,6002004-03-29 HIGH 10.0 CVE-2004-0168 Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging." Mac Os X No fix yet Fix from $1,9502004-03-15 HIGH 7.5 CVE-2004-0167 DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media. Mac Os X No fix yet Fix from $1,9502004-03-15 MEDIUM 5.0 CVE-2004-0165 Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbi… Mac Os X Patch available Fix from $1,6002004-03-15 MEDIUM 5.0 CVE-2004-0166 Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar." Mac Os X Patch available Fix from $1,6002004-03-15 MEDIUM 5.0 CVE-2004-0169 QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long … Darwin Streaming Server Patch available Fix from $1,6002004-03-15 HIGH 10.0 CVE-2004-0092 Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact. Mac Os X No fix yet Fix from $1,9502004-03-03 MEDIUM 5.0 CVE-2004-0085 Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086. Mac Os X Patch available Fix from $1,6002004-03-03 MEDIUM 5.0 CVE-2004-0086 Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085. Mac Os X No fix yet Fix from $1,6002004-03-03 MEDIUM 5.0 CVE-2003-1005 The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequence… Mac Os X Patch available Fix from $1,6002003-12-31 MEDIUM 5.0 CVE-2003-0975 Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with… Safari Mitigation only Fix from $1,6002003-12-15 HIGH 7.2 CVE-2001-1411 Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. Mac Os X Mitigation only Fix from $1,9502003-11-17 HIGH 7.5 CVE-2003-0871 Unknown vulnerability in QuickTime Java in Mac OS X v10.3 and Mac OS X Server 10.3 allows attackers to gain "unauthorized access to a system." Mac Os X Patch available Fix from $1,9502003-11-03 HIGH 7.5 CVE-2003-0881 Mail in Mac OS X before 10.3, when configured to use MD5 Challenge Response, uses plaintext authentication if the CRAM-MD5 hashed login fails, which … Mac Os X after 10.3 Fix from $1,9502003-11-03 MEDIUM 5.0 CVE-2003-0882 Mac OS X before 10.3 initializes the TCP timestamp with a constant number, which allows remote attackers to determine the system's uptime via the ID … Mac Os X after 10.3 Fix from $1,6002003-11-03 HIGH 10.0 CVE-2003-0421 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. … Darwin Streaming Server Mitigation only Fix from $1,9502003-08-27 HIGH 10.0 CVE-2003-0426 The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allow… Darwin Streaming Server No fix yet Fix from $1,9502003-08-27 HIGH 10.0 CVE-2003-0502 Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence foll… Darwin Streaming Server after 4.1.3g Fix from $1,9502003-08-27 MEDIUM 5.0 CVE-2003-0422 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via a request to view_broadcast.… Darwin Streaming Server Mitigation only Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0423 parse_xml.cgi in Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to obtain the source code for parseable files via th… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0424 Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space (%20… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0425 Directory traversal vulnerability in Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to read arbitrary files via a ..… Darwin Streaming Server No fix yet Fix from $1,6002003-08-27 MEDIUM 5.0 CVE-2003-0379 Unknown vulnerability in Apple File Service (AFP Server) for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote atta… Afp Server Patch available Fix from $1,6002003-07-24 HIGH 7.6 CVE-2003-0270EPSS 11% The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authe… 802.11n Mitigation only Fix from $1,9502003-06-16 HIGH 7.5 CVE-2003-0370 Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers … Safari after 2.2.2 Fix from $1,9502003-06-16