13775 matches found
Apple MAC OS X NTFS Memory Layout Disclosure Vulnerability
Apple Mac OS X is a commercial operating system. A security vulnerability exists in Apple Mac OS X NTFS that allows local attackers to exploit the vulnerability to run malicious applications to obtain kernel memory layout...
Apple MAC OS X Code Signing Check Bypass Vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X code signing fails to verify libraries loaded outside of the application bundle, allowing attackers to exploit vulnerabilities to run malicious applications and bypass code signing...
Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04266)
Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...
Apple MAC OS X XPC entitlements elevation of privilege vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X checks for a security vulnerability in XPC entitlements, which allows attackers to exploit the vulnerability to gain administrative privileges without authentication...
Apple MAC OS X IOAcceleratorFamily Memory Corruption Vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a memory corruption vulnerability in IOAcceleratorFamily, which allows attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...
Apple MAC OS X Apache Server HTTP Authentication Bypass Vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X default Apache configuration does not contain the modhfsapple vulnerability, which allows remote attackers to exploit the vulnerability by submitting a special request to access HTTP authentication-protected directory information...
Apple MAC OS X Font File Handling Processing Arbitrary Code Execution Vulnerability (CNVD-2015-04268)
Apple Mac OS X is a commercial operating system. An arbitrary code execution vulnerability exists in Apple Mac OS X's handling of specially crafted font files, which allows an attacker to construct a malicious file that can be parsed by a user to execute arbitrary code...
Wireshark Installed (Mac OS X)
Binary data macosxwiresharkinstalled.nbin...
Apple MAC OS X NVIDIA Graphics Driver Out-of-Bounds Write Vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X handles an out-of-bounds write vulnerability in the NVIDIA driver, which allows remote attackers to exploit the vulnerability to run a malicious application to execute arbitrary code...
Apple OS X EFI Flash Modification Vulnerability
Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X has a security vulnerability that allows root privileged applications to modify EFI flash memory by failing to adequately lock the EIF flash memory when resuming from hibernation...
Apple MAC OS X LZVN Compression Memory Leak Vulnerability
Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X LZVN compression handling allows an attacker to run a malicious application to obtain memory layout information...
Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)
The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...
Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)
The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...
Apple OS X Entitlements Rootpipe Privilege Escalation
This module exploits the rootpipe vulnerability and bypasses Apple's initial fix for the issue by injecting code into a process with the 'admin.writeconfig' entitlement. Module Options msf use exploit/osx/local/rootpipe/entitlements msf undefinedentitlements show actions ...actions... msf...
Google Chrome Multiple Vulnerabilities-01 (Jun 2015) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Adobe Photoshop CC Multiple Vulnerabilities (APSB15-12) (Mac OS X)
The version of Adobe Photoshop installed on the remote Mac OS X host is prior or equal to CC 2014 15.2.2 2014.2.2. It is, therefore, affected by the following vulnerabilities : - An unspecified memory corruption flaw exists due to not properly validating user-supplied input. An attacker can explo...
Adobe Flash Player Improper FLV Parsing Vulnerability (Jun 2015) - Mac OS X
Adobe Flash Player is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player <= 18.0.0.161 RCE (APSB15-14) (Mac OS X)
The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.161. It is, therefore, affected by a remote code execution vulnerability due to improper validation of unspecified user-supplied input. A remote attacker can exploit this, via specially...
Google Chrome < 43.0.2357.130 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is prior to 43.0.2357.130. It is, therefore, affected by multiple vulnerabilities : - A scheme validation error exists in WebUI. A remote attacker can exploit this to have an unspecified impact. CVE-2015-1266 - A cross-origin bypa...