Apple Mac Os X Server vulnerabilities

654 known vulnerabilities affecting apple/mac_os_x_server.

Total CVEs

654

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL75HIGH157MEDIUM363LOW59

Vulnerabilities

SortPage 8 of 33

CVE-2009-0942P3MEDIUMCVSS 6.8v10.4.11v10.5.0+6 more2009-05-13

CVE-2009-0942 [MEDIUM] CWE-20 CVE-2009-0942: Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.

nvd

CVE-2014-1391P3MEDIUMCVSS 6.8v10.7.52014-09-19

CVE-2014-1391 [MEDIUM] CWE-119 CVE-2014-1391: QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with RLE encoding.

nvd

CVE-2008-2332P3CRITICALCVSS 9.3v10.4.11v10.5+4 more2008-09-16

CVE-2008-2332 [CRITICAL] CWE-399 CVE-2008-2332: ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to caus ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted TIFF image.

nvd

CVE-2010-0524P3HIGHCVSS 7.5v10.6.0v10.6.1+1 more2010-03-30

CVE-2010-0524 [HIGH] CWE-264 CVE-2010-0524: The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EA The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message.

nvd

CVE-2011-0176P3MEDIUMCVSS 6.8≤ 10.6.6v10.6.0+5 more2011-03-23

CVE-2011-0176 [MEDIUM] CWE-119 CVE-2011-0176: Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.

nvd

CVE-2011-0177P3MEDIUMCVSS 6.8≤ 10.6.6v10.6.0+5 more2011-03-23

CVE-2011-0177 [MEDIUM] CWE-119 CVE-2011-0177: Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

nvd

CVE-2011-0175P3MEDIUMCVSS 6.8≤ 10.6.6v10.6.0+5 more2011-03-23

CVE-2011-0175 [MEDIUM] CWE-119 CVE-2011-0175: Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.

nvd

CVE-2011-3226P3MEDIUMCVSS 6.8v10.7.0v10.7.12011-10-14

CVE-2011-3226 [MEDIUM] CWE-264 CVE-2011-3226: Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypass the password requirement by leveraging lack of an AuthenticationAuthority attribute for a user account.

nvd

CVE-2004-0926P4CRITICALCVSS 10.0v10.2v10.2.1+13 more2005-01-27

CVE-2004-0926 [CRITICAL] CVE-2004-0926: Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attac Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.

nvd

CVE-2013-0966P3MEDIUMCVSS 6.4v10.6.8v10.7.0+5 more2013-03-15

CVE-2013-0966 [MEDIUM] CVE-2013-0966: The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not p The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.

nvd

CVE-2005-2743P4HIGHCVSS 7.5v10.3.92005-10-26

CVE-2005-2743 [HIGH] CVE-2005-2743: The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary code.

nvd

CVE-2005-0342P4LOWCVSS 2.1PoCv10.0v10.1+22 more2005-05-02

CVE-2005-0342 [LOW] CVE-2005-0342: The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileg The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a hard link from the .DS_Store file to an arbitrary file.

nvd

CVE-2005-2508P4MEDIUMCVSS 4.6PoCv10.4.22005-08-19

CVE-2005-2508 [MEDIUM] CVE-2005-2508: dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user account dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.

nvd

CVE-2015-0228P4MEDIUMCVSS 5.0v5.0.32015-03-08

CVE-2015-0228 [MEDIUM] CWE-20 CVE-2015-0228: The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server thr The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

nvd

CVE-2009-2191P4HIGHCVSS 7.5v10.4.11v10.5.5+2 more2009-08-06

CVE-2009-2191 [HIGH] CWE-134 CVE-2009-2191: Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in an application name.

nvd

CVE-2009-0154P4MEDIUMCVSS 6.8v10.4.11v10.5.0+6 more2009-05-13

CVE-2009-0154 [MEDIUM] CWE-119 CVE-2009-0154: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10 Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font.

nvd

CVE-2010-1380P4HIGHCVSS 7.5v10.6.0v10.6.1+2 more2010-06-17

CVE-2010-1380 [HIGH] CWE-189 CVE-2010-1380: Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allo Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page sizes.

nvd

CVE-2009-0020P4HIGHCVSS 7.8v10.4.11v10.5.62009-02-13

CVE-2009-0020 [HIGH] CWE-399 CVE-2009-0020: Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.

nvd

CVE-2005-2757P4HIGHCVSS 7.5v10.3v10.3.1+12 more2005-12-01

CVE-2005-2757 [HIGH] CVE-2005-2757: Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."

nvd

CVE-2009-2828P4HIGHCVSS 7.5v10.5.82009-11-10

CVE-2009-2828 [HIGH] CWE-399 CVE-2009-2828: The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

nvd

← Previous8 / 33Next →