EUVD-2017-11565

Malware in sbrugna...

EUVD-2020-30774

Malware in sbrugna...

CVE-2020-9995

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting...

CVE-2020-9995

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting...

CVE-2020-9995

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting...

CVE-2020-9995

The CVE-2020-9995 issue affects macOS Server prior to 5.11, caused by improper parsing/validation of URLs that can lead to an open redirect or cross-site scripting (XSS). Exploitation requires a user to click a malicious URL, enabling an attacker to execute script in a user session. Apple confirm...

macOS : macOS Server < 5.11 XSS (HT211932)

The version of macOS Server formerly known as Mac OS X Server installed on the remote host is prior to 5.11. It is, therefore, affected by an open redirect or cross-site scripting XSS vulnerability due to an issue in the parsing of URLs. An unauthenticated, remote attacker can exploit this, by...

Apple Macos Server Input Validation Error Vulnerability

Apple Macos Server is a server-side version of the operating system from the American company Apple. An input validation error vulnerability exists in versions of macOS Server prior to 5.11, which stems from the handling of maliciously crafted URLs that could lead to open redirects or cross-site...

About the security content of macOS Server 5.11 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Vulnerability fixed in Apple MacOS Server

A vulnerability has been fixed in Apple MacOS Server. The vulnerability potentially allows a remote malicious party to perform execute a cross-site scripting attack or the ability to exploit an open-redirect vulnerability to be exploited. Apple has released updates to fix the vulnerability. More...

About the security content of macOS Server 5.11

About the security content of macOS Server 5.11 This document describes the security content of macOS Server 5.11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Apple macOS Server and macOS High Sierra Postfi Elevation of Privilege Vulnerability

Apple macOS Server and macOS High Sierra are both products of Apple. apple macOS Server is a server designed for macOS and iOS that provides team collaboration, software development, website hosting, and more. macOS High Sierra is a suite of specialized operating systems developed for Mac...

About the security content of macOS Server 5.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

macOS : macOS Server < 5.4 Multiple Vulnerabilities

The version of macOS Server formerly known as Mac OS X Server installed on the remote host is prior to 5.4. It is, therefore, affected by the multiple Buffer Overflow DoS vulnerabilities in FreeRADIUS C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103531;...

macOS High Sierra Available—And Vulnerable to Keychain Attack

Apple made its latest OS update available Monday, but the release of High Sierra was tainted somewhat by the fact it comes replete with a critical vulnerability that allows an attacker to dump plaintext passwords from the macOS Keychain. Researcher Patrick Wardle, chief security researcher at...

About the security content of macOS Server 5.4

About the security content of macOS Server 5.4 This document describes the security content of macOS Server 5.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Apple security pages for the following products and apply...

Code injection

An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2017-2382

An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors...

CVE-2017-2382

An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors...