2157 matches found
CVE-2015-1150
The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended...
Design/Logic Flaw
Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...
CVE-2015-1151
Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...
KLA10570 Multiple vulnerabilities in OS X Server
Multiple serious vulnerabilities have been found in Apple OS X Server. Malicious users can exploit these vulnerabilities to bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited remotely via vectors...
KLA10564 Denial of service vulnerability in OS X
An unspecified vulnerability was found in Apple OS X. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed JPEG. NB: Vendor does not provide CVSS rating. This rating was calculated in Kaspersky Lab and...
KLA10562 Obtain sensitive information vulnerability in Apple OS X
Improper password storage was found in OS X. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via logfile reading. NB: Vendor does not provide CVSS rating. This rating was calculated in Kaspersky Lab and can differ fro...
Apple OS X Buffer Overflow Vulnerability
Apple OS X is the operating system used by the Apple family of machines. Apple OS X suffers from a buffer overflow vulnerability. An attacker is allowed to exploit this vulnerability to gain elevation of privilege...
Apple OS X present in the system can enhance the root access API Backdoor-vulnerability warning-the black bar safety net
0x00 summary Apple OS X system Admin framework presence can elevate the root permissions of the API to the back door, and has been in existence for many years, at least from the 2 0 1 1 years. I was in 2 0 1 4 years 1 0 months to discover he can be used to have any user permissions elevated to ro...
CVE-2015-1148
Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...
CVE-2015-1147
Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-1146
The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145...
CVE-2015-1145
The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1146...
CVE-2015-1144
Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier...
CVE-2015-1142
LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service Finder crash via crafted localization data...
CVE-2015-1143
LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue...
CVE-2015-1141
The machvmread functionality in the kernel in Apple OS X before 10.10.3 allows local users to cause a denial of service system crash via unspecified vectors...
CVE-2015-1140
Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors...
CVE-2015-1139
ImageIO in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .sgi file...