MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-3489 | 6.5 | Oct 3 | The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote… Affected: 10.7.0 through 10.7.5; 10.6.8 |
| CVE-2010-1637 | 6.5 | Jun 22 | The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to scan internal… Affected: before 10.6.8 |
| CVE-2009-2416 | 6.5 | Aug 11 | Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service… Affected: before 10.4.11; 10.5.0 before 10.5.8; 10.6.0 before 10.6.2 |
| CVE-2011-0199 | 5.9 | Jun 24 | The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificates that lack OCSP URLs, which might… Affected: 10.6.0 before 10.6.8 |
| CVE-2009-0141 | 5.5 | Feb 13 | XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of… Affected: 10.4.11; 10.5.6 |
| CVE-2016-1787 | 5.3 | Mar 24 | Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors Affected: through 5.0.15 |
| CVE-2016-1776 | 5.3 | Mar 24 | Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration… Affected: through 5.0.15 |
| CVE-2016-1774 | 5.3 | Mar 24 | The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote… Affected: through 5.0.15 |
Showing 8
The 500 most important CVEs for this product (exploited first, then by severity)