Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AppleMac Os X

39 matches found

CVE
CVE•added 2016/03/31 4:59 p.m.•243 views

CVE-2016-3141

Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data contai...

9.8CVSS7.9AI score0.3389EPSS
CVE
CVE•added 2016/03/31 4:59 p.m.•219 views

CVE-2016-3142

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an inv...

8.2CVSS7AI score0.01992EPSS
CVE
CVE•added 2016/03/13 6:59 p.m.•207 views

CVE-2016-1950

Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.

8.8CVSS7.9AI score0.01752EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•134 views

CVE-2016-1757

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS5.9AI score0.58452EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•128 views

CVE-2016-1762

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

8.1CVSS7AI score0.05589EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•108 views

CVE-2016-1764

The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL.

4.3CVSS4.1AI score0.06683EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•79 views

CVE-2015-7551

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of se...

8.4CVSS6.7AI score0.46054EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•66 views

CVE-2016-1743

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1744.

9.3CVSS6.5AI score0.02745EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•66 views

CVE-2016-1744

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.

9.3CVSS6.5AI score0.02745EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•66 views

CVE-2016-1755

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1754.

9.3CVSS7.1AI score0.03453EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•64 views

CVE-2016-1758

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app.

4.3CVSS4.4AI score0.00276EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•61 views

CVE-2016-1769

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.

7.8CVSS6.7AI score0.05269EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•60 views

CVE-2016-1740

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.

9.3CVSS7.4AI score0.0135EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•58 views

CVE-2016-1753

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS6.8AI score0.00362EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•57 views

CVE-2016-1752

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app.

7.1CVSS5.6AI score0.00185EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•57 views

CVE-2016-1754

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.

9.3CVSS7.1AI score0.03453EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•55 views

CVE-2016-1749

IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS6.5AI score0.01905EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•55 views

CVE-2016-1756

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

9.3CVSS7.1AI score0.0019EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•55 views

CVE-2016-1767

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.

7.8CVSS6.7AI score0.08571EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•55 views

CVE-2016-1768

QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1767.

7.8CVSS6.7AI score0.08571EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•53 views

CVE-2016-1741

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

10CVSS7.3AI score0.17312EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•51 views

CVE-2016-1748

IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.

4.3CVSS4.5AI score0.00257EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•49 views

CVE-2016-1761

libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

10CVSS7.5AI score0.1098EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•49 views

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages.

5.9CVSS5.9AI score0.00588EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•48 views

CVE-2016-1747

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1746.

9.3CVSS6.5AI score0.00228EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•47 views

CVE-2016-1732

AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.

5.5CVSS4.7AI score0.00054EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•46 views

CVE-2016-1734

AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device.

7.2CVSS7.2AI score0.00109EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•45 views

CVE-2016-1733

AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS6.5AI score0.00227EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•45 views

CVE-2016-1736

Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.

9.3CVSS6.5AI score0.00241EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•45 views

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

9.3CVSS7.4AI score0.00736EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•44 views

CVE-2016-1735

Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1736.

9.3CVSS6.5AI score0.00241EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•44 views

CVE-2016-1738

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.

7.8CVSS5.4AI score0.00048EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•44 views

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL.

6.5CVSS5.2AI score0.00233EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•43 views

CVE-2016-1746

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.

9.3CVSS6.5AI score0.00228EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•43 views

CVE-2016-1750

Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS6.8AI score0.00378EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•42 views

CVE-2016-1759

The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS6.8AI score0.00241EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•41 views

CVE-2016-1745

IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.

5.5CVSS4.8AI score0.00048EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•40 views

CVE-2016-1737

Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file.

6.8CVSS6.4AI score0.00741EPSS
CVE
CVE•added 2016/03/24 1:59 a.m.•39 views

CVE-2016-1773

The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors.

3.3CVSS4AI score0.00054EPSS