15329 matches found
VMware Fusion 11.x < 11.5.5 Privilege Escalation (VMSA-2020-0017)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.5. It is, therefore, affected by a privilege escalation vulnerability due to Improper XPC Client validation. An authenticated, local attacker can exploit this to escalate their normal user privileges...
Mozilla Thunderbird < 68.11
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 68.11. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-35 advisory. - Mozilla developers Jason Kratzer and Luke Wagner reported memory safety bugs present in Thunderbird 68.1...
Node.js 10.x < 10.21.0, 12.x < 12.18.0, 14.x < 14.4.0 Multiple Vulnerabilities - Mac OS X
Node.js is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescription...
Node.js 10.x < 10.21.0 Buffer Overflow Vulnerability - Mac OS X
Node.js is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescripti...
Microsoft Office Multiple Vulnerabilities (Jul 2020) - Mac OS X
This host is missing an important security update for Microsoft Office 2016 and Office 2019 on Mac OS X according to Microsoft security updates July 2020 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Plex Media Server Installed (Mac OS X)
Binary data macosxplexmediaserverinstalled.nbin...
The vulnerability of the uninstaller component of the Cisco AnyConnect Secure Mobility Client for Mac OS allows a perpetrator to influence the integrity of files.
The vulnerability of the uninstaller component of the Cisco AnyConnect Secure Mobility Client for Mac OS relates to improper handling of paths leading to directories. Exploiting this vulnerability can allow an attacker to influence the integrity of files through a specially created symbolic link...
Python <= 3.8.3 DoS Vulnerability - Mac OS X
Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 78.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 78.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-28 advisory. - Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the...
Wireshark Security Update (wnpa-sec-2020-09) - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Google Chrome Use-After-Free In Extensions Vulnerability (Jun 2020) - Mac OS X
Google Chrome is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; if...
Mozilla Firefox < 78.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-24 advisory. - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler...
Mozilla Firefox Security Advisory (MFSA2020-24) - Mac OS X
This host is missing a security update for Mozilla Firefox. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Mozilla Firefox ESR Security Advisory (MFSA2020-25) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...
Objective Development Software Little Snitch Backlink Vulnerability
Objective Development Software Little Snitch is a host-based firewall for macOS apps from Objective Development Software of Austria. A backlink vulnerability exists in Objective Development Software Little Snitch 4.5.1 and earlier versions, which can be exploited by an attacker to elevate...
The vulnerability of the software update service for Cisco Webex Meetings Desktop App on Mac operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the software update service for the Cisco Webex Meetings Desktop App on Mac operating systems is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created website...
Adobe Premiere Pro Installed (Mac OS X)
Binary data macosxadobepremiereproinstalled.nbin...
CVE-2020-14977
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...