Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.1.2 vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2
CVE-2009-2834
IOKit in Apple Mac OS X prior to 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.3.8Apple Mac Os X 10.3.1Apple Mac Os X 10.2.0Apple Mac Os X 10.2.2Apple Mac Os X 10.2Apple Mac Os X 10.1Apple Mac Os X 10.1.5Apple Mac Os X 10.4.0Apple Mac Os X 10.4.5Apple Mac Os X 10.4.7Apple Mac Os X 10.0.2Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.9Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7
4.6
CVSSv2
CVE-2009-2835
The kernel in Apple Mac OS X prior to 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.1.3Apple Mac Os X 10.1.5Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.6Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.2.2
5
CVSSv2
CVE-2012-3721
Profile Manager in Apple Mac OS X prior to 10.7.5 does not properly perform authentication for the Device Management private interface, which allows malicious users to enumerate managed devices via unspecified vectors.
Apple Mac Os X 10.4.11Apple Mac Os X 10.6.1Apple Mac Os X 10.2.0Apple Mac Os X 10.3.0Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.6.7Apple Mac Os X 10.6.0Apple Mac Os X 10.5.3Apple Mac Os X 10.6.4Apple Mac Os X 10.5.5Apple Mac Os X 10.4.3Apple Mac Os X 10.0.0Apple Mac Os X 10.3.8Apple Mac Os X 10.4.9Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.7.3Apple Mac Os X 10.5.4Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.0.2
5
CVSSv2
CVE-2014-4453
Apple iOS prior to 8.1.1 and OS X prior to 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote malicious users to obtain sensitive information via unspecified vectors.
Apple Iphone OsApple Iphone Os 8.0.2Apple Iphone Os 8.0.1Apple Iphone Os 8.0Apple Mac Os XApple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.7Apple Mac Os X 10.4.6Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.3Apple Mac Os X 10.3.2Apple Mac Os X 10.2.5Apple Mac Os X 10.2.4Apple Mac Os X 10.1.4
6.8
CVSSv2
CVE-2011-0229
Apple Type Services (ATS) in Apple Mac OS X up to and including 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote malicious users to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
Apple Mac Os X ServerApple Mac Os X Server 10.6.4Apple Mac Os X Server 10.6.3Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.0Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.1Apple Mac Os X Server 10.0.0Apple Mac Os X 10.6.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0
2.6
CVSSv2
CVE-2011-3218
The "Save for Web" selection in QuickTime Player in Apple Mac OS X up to and including 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle malicious users to conduct cross-site scripting (XSS) attacks by spoofing the ...
Apple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.0.1Apple Mac Os X 10.6.1Apple Mac Os X 10.6.0Apple Mac Os X 10.5.1
2.6
CVSSv2
CVE-2011-3224
The User Documentation component in Apple Mac OS X up to and including 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle malicious users to execute arbitrary code by spoofing the http server.
Apple Mac Os X 10.6.7Apple Mac Os X 10.6.6Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.0Apple Mac Os X Server 10.2Apple Mac Os X Server 10.0.4Apple Mac Os X Server 10.0.3Apple Mac Os X 10.6.3Apple Mac Os X 10.6.2Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.4.6
4.6
CVSSv2
CVE-2011-3214
IOGraphics in Apple Mac OS X up to and including 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate malicious users to bypass the password requirement via unspecified vectors.
Apple Mac Os X 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.0.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.6.6Apple Mac Os X 10.6.7Apple Mac Os X Server 10.5.8Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.0Apple Mac Os X Server 10.5
6.8
CVSSv2
CVE-2011-3217
MediaKit in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image.
Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1
6.8
CVSSv2
CVE-2011-0224
CoreMedia in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.
Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.1.1Apple Mac Os X Server 10.1.0Apple Mac Os X Server 10.0Apple Mac Os X 10.6.5Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.4.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook