CVE-2010-1821
Published Apr 13, 2017Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges.
Vendor/product archive
apple / mac_os_x_server CVEs
Beta · best-effort817 CVEs tagged to apple / mac_os_x_server — 163 Critical, 161 High, 430 Medium, 63 Low, 0 Unrated.
CVE-2010-1816
Published Apr 13, 2017Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of ser…
CVE-2016-1787
Published Mar 24, 2016Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors.
CVE-2016-1777
Published Mar 24, 2016Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vec…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-1776
Published Mar 24, 2016Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration info…
CVE-2016-1774
Published Mar 24, 2016The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attacker…
CVE-2015-7031
Published Oct 23, 2015The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions v…
CVE-2015-5911
Published Sep 18, 2015Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document.
CVE-2015-5986
Published Sep 5, 2015openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon e…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-5722
Published Sep 5, 2015buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-3185
Published Jul 20, 2015The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authoriza…
CVE-2015-0253
Published Jul 20, 2015The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a de…
CVE-2015-3165
Published May 28, 2015Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a deni…
CVE-2015-0228
Published Mar 8, 2015The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process…
CVE-2014-4350
Published Sep 19, 2014Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…
CVE-2014-1391
Published Sep 19, 2014QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craf…
CVE-2014-1371
Published Jul 1, 2014Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and applicati…
CVE-2014-1370
Published Jul 1, 2014The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory acces…
CVE-2014-1296
Published Apr 23, 2014CFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header'…
CVE-2013-5704
Published Apr 15, 2014The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent…
CVE-2014-0067
Published Mar 31, 2014The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to b…
CVE-2014-1270
Published Feb 27, 2014WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicatio…
CVE-2014-1269
Published Feb 27, 2014WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicatio…
CVE-2014-1268
Published Feb 27, 2014WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicatio…
CVE-2014-1265
Published Feb 27, 2014The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the sy…
Showing 1-25 of 817 CVEsPage 1 of 33