Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0500 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 7.8 HIGH· v2 Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record,...Show more Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue."Show less
CVE-2010-0498 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 7.2 HIGH· v2 Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors.
CVE-2010-0497 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary c...Show more Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type.Show less
CVE-2010-0065 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compr...Show more Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compression.Show less
CVE-2010-0064 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.9 MEDIUM· v2 DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impac...Show more DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users.Show less
CVE-2010-0063 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type...Show more Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions.Show less
CVE-2010-0062 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3...Show more Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length calculation.Show less
CVE-2010-0060 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDMC encoding.
CVE-2010-0055 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package.
CVE-2010-0533 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors.
CVE-2010-0059 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which trigg...Show more CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA.Show less
CVE-2010-0058 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.4 MEDIUM· v2 freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into t...Show more freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into the system.Show less
CVE-2010-0057 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request.
CVE-2010-0056 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.
CVE-2009-2801 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 30, 2010 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to bypass intended access restrictions via packet data, related to a "timing issue."
CVE-2010-1181 1Apple 1Iphone Os Apr 29, 2026 Mar 29, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a MARQUEE element.
CVE-2010-1180 1Apple 1Safari Apr 29, 2026 Mar 29, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long exception string in a throw statement, possibly a rela...Show more Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514.Show less
CVE-2010-1179 1Apple 1Safari Apr 29, 2026 Mar 29, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo e...Show more Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024.Show less
CVE-2010-1178 1Apple 1Safari Apr 29, 2026 Mar 29, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) via a JavaScript loop that attempts to construct an infinitely long string.
CVE-2010-1177 1Apple 1Safari Apr 29, 2026 Mar 29, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving document.write calls with long crafted stri...Show more Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving document.write calls with long crafted strings.Show less

Previous 1...376377378...435 Next