LibreOffice Use-after-free Vulnerability (Jul 2016) - Mac OS X

LibreOffice is prone to a use after free vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...

Adobe Brackets Cross-site Scripting and Unspecified Vulnerabilities - Mac OS X

Adobe Brackets is prone to cross-site scripting and an unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Brackets Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Brackets on Mac OS X. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the OS X operating system, which allows a malicious attacker to execute arbitrary code.

The vulnerability of the IOSurface component allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits type mismatch errors...

Apple Safari for Mac OS X local XXE vulnerability

No description provided by source...

Researchers Tie Pirrit Adware to Israeli Marketing Company

Researchers have linked a variant of the Pirrit adware for Mac OS X to an Israeli online marketing company called TargetingEdge that is still in stealth mode. Amit Serper, lead Linux and Mac OS X researcher at Cybereason, said that script he wrote to remove the original version of Pirrit from...

The vulnerability of Acrobat software allows a malicious individual to compromise the integrity of protected information.

XSS Cross-Site Scripting in Acrobat for OS X allows malicious individuals to inject any web script or HTML code remotely...

Apple Safari 9.1.1 Local XXE Injection

Advisory ID: SGMA16-003 Title: Apple Safari for Mac OS X SVG local XXE Product: Apple Safari for Mac OS X Version: 9.1.1 and probably prior Vendor: apple.com Vulnerability type: XXE Risk level: Medium Credit: Filippo Cavallarin - wearesegment.com CVE: N/A Vendor notification: 2015-04-08 Vendor fi...

Microsoft Office Unsupported Version Detection (Mac OS X)

According to its version, the installation of Microsoft Office on the remote Mac OS X host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...

CVE-2016-5087

Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations...

OSX < 10.11.5 Multiple Vulnerabilities

Binary data 800143.prm...

Google Chrome Security Updates (stable-channel-update_16-2016-06) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cau...

Adobe Flash Player Security Update (APSB16-18) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player for Mac <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 21.0.0.242. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition...

CVE-2016-4162

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

CVE-2016-4160

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

UBUNTU-CVE-2016-4162

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...

Microsoft Office Remote Code Execution Vulnerability (3163610) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS16-070 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS16-070: Security Update for Microsoft Office (3163610) (Mac OS X)

The version of Microsoft Office installed on the remote Mac OS X host is affected by a remote code execution vulnerability due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this by convincing a user to open a specially crafted file or visit a website...