PT-2013-2900

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client affected versions not specified Description The issue is related to weak permissions for a library directory in Cisco AnyConnect Secure Mobility Client on Mac OS X, allowing local users to gain privilege...

CVE-2013-1130: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619...

CVE-2013-1034

Multiple cross-site scripting XSS vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1034

Multiple cross-site scripting XSS vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1034

CVE-2013-1034 affects Apple Mac OS X Server’s Wiki Server prior to version 2.2.2, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD notes no confidentiality impact, but partial integrity impact (I:P) with no availabil...

CVE-2013-1034: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2826

Name of the Vulnerable Software and Affected Versions Mac OS X Server versions prior to 2.2.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Wiki Server component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML,...

Thunderbird 17.x through 23.x Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is a version prior to 24.0. It is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could allow for denial of service or arbitrary code execution. CVE-2013-1718, CVE-2013-1719 - The HTML5 Tree...

CVE-2013-1729

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...

Design/Logic Flaw

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...

CVE-2013-1729

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...

CVE-2013-1729

CVE-2013-1729 affects Mozilla Firefox WebGL on Mac OS X when using NVIDIA graphics drivers. It is an information-disclosure vulnerability: reading from a CANVAS element can allow remote attackers to obtain desktop-screenshot data. Documented in multiple feeds (SUSE, Fedora/NASL, OpenVAS) with a f...

PT-2013-3360

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 Description The issue concerns the WebGL implementation in Mozilla Firefox, specifically when used with NVIDIA graphics drivers on Mac OS X. It allows remote attackers to obtain desktop-screenshot data by...

Apple Mac OS X移动设备管理本地信息泄漏漏洞(CVE-2013-1030)

BUGTRAQ ID: 62377 CVECAN ID: CVE-2013-1030 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4存在将密码通过命令行传递到mdmclient的问题，可使同一系统的其他用户可见，导致敏感信息泄露。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of OS X Mountain Lion...

CVE-2013-1729: Exposure of Sensitive Information to an Unauthorized Actor

The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element...

Adobe Flash Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe AIR Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe AIR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

Adobe Shockwave Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[OS X Auditor] free Mac OS X computer forensics tool

OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and deprecated system and third party's startup items the users' agents the user...