Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.4. vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1474
Dashboard in Apple Mac OS X 10.4.1 allows remote malicious users to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4Apple Mac Os X Server 10.4
NA
CVE-2005-1722
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions.
Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1
NA
CVE-2005-2751
memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group.
Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2
NA
CVE-2005-2749
Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information. NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X 10.4Apple Mac Os X Server 10.4.2
NA
CVE-2005-3704
System log server in Mac OS X and OS X Server 10.4 up to and including 10.4.3 allows remote malicious users to spoof syslog messages in log files by injecting various control characters such as newline (NL).
Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1
NA
CVE-2006-0396
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote malicious users to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the use...
Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3
NA
CVE-2006-0397
Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows malicious users to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, ...
Apple Mac Os X 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X 10.4.5Apple Mac Os X Server 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4
NA
CVE-2006-0398
Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows malicious users to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, ...
Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X Server 10.4Apple Mac Os X 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2
NA
CVE-2006-0399
Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows malicious users to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, ...
Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.4.5
NA
CVE-2006-0389
Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 up to and including 10.4.5 allows remote malicious users to execute arbitrary JavaScript via unspecified vectors involving RSS feeds.
Apple Mac Os X 10.4.5Apple Mac Os X Server 10.4Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook