Wireshark Security Updates (wnpa-sec-2020-03, wnpa-sec-2020-04, wnpa-sec-2020-05) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark Security Updates (wnpa-sec-2020-06) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2018-19658

The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote...

CVE-2019-4000

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges...

Input validation

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges...

CVE-2019-4000

CVE-2019-4000 affects Druva inSync Mac OS Client 6.5.0. The root cause is improper neutralization of directives in dynamically evaluated code, allowing a local, authenticated attacker to execute arbitrary Python expressions with root privileges. The vulnerability is described as a locally exploit...

CVE-2019-4000

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges...

PT-2020-10929

Name of the Vulnerable Software and Affected Versions Druva inSync Mac OS Client version 6.5.0 Description The issue is related to the improper neutralization of directives in dynamically evaluated code, allowing a local, authenticated attacker to execute arbitrary Python expressions with root...

CVE-2019-4000: Improper Control of Generation of Code

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges...

Google Chrome Security Update (stable-channel-update-for-desktop_24-2020-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Update (stable-channel-update-for-desktop_18-2020-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Mozilla Firefox ESR < 68.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 68.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-06 advisory. - Mozilla developers and community members Raul Gurzau, Tyson Smith, Bob Clary, Liz Henry, and Christian...

CVE-2012-5366

The IPv6 implementation in Apple Mac OS X unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries...

Information disclosure

The IPv6 implementation in Apple Mac OS X unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries...

CVE-2012-5366

The IPv6 implementation in Apple Mac OS X unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries...

CVE-2012-5366

The CVE-2012-5366 entry describes a DoS vulnerability in the IPv6 implementation of Apple Mac OS X (unknown versions up to 2012) triggered by a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. The affected component is the OS X IPv6 stack; the underlying root caus...

CVE-2012-5366: Uncontrolled Resource Consumption

The IPv6 implementation in Apple Mac OS X unknown versions, year 2012 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries...

PT-2020-7254

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X affected versions not specified Description: The issue allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries. This affects the IPv6...

Python 2.7.x <= 2.7.17, 3.5 <= 3.5.9, 3.6.x <= 3.6.10, 3.7.x <= 3.7.6, 3.8.x <= 3.8.1 Regular Expression Denial of Service (ReDoS) Vulnerability - Mac OS X

Python is prone to a Regular Expression Denial of Service ReDoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Acrobat 2017 Security Update (APSB20-05) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...