Lucene search
K

28 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-5817

Malware in sbrugna...

6.6CVSS6.3AI score0.00048EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-0819

Malware in sbrugna...

7.2CVSS6.4AI score0.00084EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-0820

Malware in sbrugna...

7.2CVSS6.4AI score0.00144EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2005-0717

Malware in sbrugna...

7.2CVSS6.3AI score0.00198EPSS
Exploits3References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/26 2:55 a.m.4 views

Malicious code in core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b59f2696f224086d9b715ff12b5bfff30405a80837b27076dd60798d46cf68b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/05/26 2:55 a.m.1 views

MAL-2025-4432 Malicious code in core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b59f2696f224086d9b715ff12b5bfff30405a80837b27076dd60798d46cf68b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/01 12:32 p.m.3 views

Malicious code in fiji-core-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030c12f26f1b90ddf92e5edd56243d4b0a357d44d867c5ee071e544a490011a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CNVD
CNVD
added 2018/11/08 12:0 a.m.4 views

Apple iTunes for Windows, iCloud for Windows and tvOS CoreFoundation elevation of privilege vulnerability

Apple iTunes for Windows, iCloud for Windows, and tvOS are products of Apple Inc. Apple iTunes for Windows is a suite of media player applications for the Windows platform. iCloud for Windows is a cloud service for the Windows platform that supports storage of music, photos, apps, contacts, etc...

7.8CVSS8.5AI score0.00379EPSS
Exploits0References1
OSV
OSV
added 2017/11/13 3:29 a.m.2 views

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

5.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.2 views

CVE-2017-2522

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a...

9.8CVSS7.6AI score0.13046EPSS
Exploits2References6
CVE
CVE
added 2017/05/22 4:54 a.m.61 views

CVE-2017-2522

CVE-2017-2522 concerns memory corruption in Apple’s CoreFoundation. The initial description confirms that iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are affected by a vulnerability in CoreFoundation that allows remote attackers to execute arbitrary code ...

9.8CVSS8.7AI score0.13046EPSS
Exploits2References6Affected Software4
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.45 views

Apple Mac OS X 10.3.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...

7.2CVSS9.5AI score0.00198EPSS
Exploits3
OpenVAS
OpenVAS
added 2010/05/12 12:0 a.m.50 views

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

10CVSS6.8AI score0.74998EPSS
Exploits24References1
OpenVAS
OpenVAS
added 2010/05/12 12:0 a.m.270 views

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

10CVSS8.6AI score0.74998EPSS
Exploits24
Prion
Prion
added 2007/12/19 9:46 p.m.10 views

Race condition

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

6.6CVSS5.6AI score0.00048EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2007/12/19 9:0 p.m.19 views

CVE-2007-5847

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

8.1AI score0.00048EPSS
Exploits1References8
CVE
CVE
added 2007/12/19 9:0 p.m.47 views

CVE-2007-5847

CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...

6.6CVSS8.1AI score0.00048EPSS
Exploits1References8Affected Software1
securityvulns
securityvulns
added 2007/01/24 12:0 a.m.49 views

MOAB-22-01-2007: Apple UserNotificationCenter Privilege Escalation Vulnerability

Summary The following description about CFUserNotification is available from Apple's Mac OS X Core Foundation reference: A CFUserNotification object presents a simple dialog on the screen and optionally receives feedback from the user. The contents of the dialog can include a header, a message, a...

0.4AI score
Exploits0
Cvelist
Cvelist
added 2005/03/22 5:0 a.m.20 views

CVE-2005-0716

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CFCHARSETPATH environment variable...

9.4AI score0.00198EPSS
Exploits3References3
CVE
CVE
added 2005/03/22 5:0 a.m.57 views

CVE-2005-0716

CVE-2005-0716 affects Mac OS X 10.3.5/10.3.6 (and possibly earlier) where a stack-based buffer overflow in the Core Foundation Library is triggered by a long CF_CHARSET_PATH environment variable. This local vulnerability could allow an attacker to execute arbitrary code on the affected system; iD...

7.2CVSS9.4AI score0.00198EPSS
Exploits3References3Affected Software2
Rows per page
Query Builder