MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0067 | – | Mar 31 | The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to… Affected: 5.0.3 |
| CVE-2014-1270 | – | Feb 27 | WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2014-1269 | – | Feb 27 | WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2014-1268 | – | Feb 27 | WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2014-1265 | – | Feb 27 | The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2014-1259 | – | Feb 27 | Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted filename Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2014-1256 | – | Feb 27 | Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2013-1024 | – | Jun 5 | CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2013-0990 | – | Jun 5 | SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2013-0984 | – | Jun 5 | Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2013-0982 | – | Jun 5 | The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2013-0975 | – | Jun 5 | Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; 10.7.5 |
| CVE-2013-0973 | – | Mar 15 | Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code… Affected: 10.6.8; 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; +1 more |
| CVE-2013-0971 | – | Mar 15 | Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via… Affected: 10.6.8; 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; +1 more |
| CVE-2013-0967 | – | Mar 15 | CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3 |
| CVE-2013-0966 | – | Mar 15 | The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to… Affected: 10.6.8; 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4; +1 more |
| CVE-2012-3723 | – | Sep 20 | Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a… Affected: through 10.7.4; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-3722 | – | Sep 20 | The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to… Affected: through 10.7.4; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-3719 | – | Sep 20 | Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that… Affected: through 10.7.4; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-3718 | – | Sep 20 | Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an… Affected: through 10.7.4; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-3716 | – | Sep 20 | CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text… Affected: 10.7.0; 10.7.1; 10.7.2; 10.7.3; 10.7.4 |
| CVE-2012-0650 | – | Sep 20 | Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: through 10.6.8; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0675 | – | May 11 | Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0662 | – | May 11 | Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0661 | – | May 11 | Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.7.0; 10.7.1; 10.7.2 |
| CVE-2012-0660 | – | May 11 | Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0659 | – | May 11 | Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0658 | – | May 11 | Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0657 | – | May 11 | Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0655 | – | May 11 | libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0654 | – | May 11 | libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary… Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2012-0651 | – | May 11 | The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message Affected: 10.6.8 |
| CVE-2012-0649 | – | May 11 | Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file Affected: through 10.7.3; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2011-3026 | – | Feb 16 | Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown… Affected: 10.7.0 before 10.7.5; 10.6.8 |
| CVE-2011-3463 | – | Feb 2 | WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by leveraging access to (1) the server… Affected: 10.7.0; 10.7.1; 10.7.2 |
| CVE-2011-3462 | – | Feb 2 | Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3460 | – | Feb 2 | Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG… Affected: through 10.7.2; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +6 more |
| CVE-2011-3459 | – | Feb 2 | Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf… Affected: through 10.7.2; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +6 more |
| CVE-2011-3458 | – | Feb 2 | QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3457 | – | Feb 2 | The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute… Affected: through 10.7.2; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +6 more |
| CVE-2011-3453 | – | Feb 2 | Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3452 | – | Feb 2 | Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3450 | – | Feb 2 | CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial… Affected: 10.7.0; 10.7.1; 10.7.2 |
| CVE-2011-3449 | – | Feb 2 | Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3448 | – | Feb 2 | Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 10.7.2; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +6 more |
| CVE-2011-3447 | – | Feb 2 | CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information… Affected: 10.7.0; 10.7.1; 10.7.2 |
| CVE-2011-3446 | – | Feb 2 | Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3444 | – | Feb 2 | Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV… Affected: through 10.7.2; 10.7.0; 10.7.1 |
| CVE-2011-3437 | – | Oct 14 | Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in… Affected: 10.7.0; 10.7.1 |
| CVE-2011-3436 | – | Oct 14 | Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass… Affected: 10.7.0; 10.7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)