Skip to content
OpenAdvisories

Archive

March 2010

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128

513 results · Feed

  • Unscored —

    Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow wh…

  • Unscored —

    iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of…

  • Unscored —
    CVE-2010-0519 Public exploit

    Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or caus…

  • Unscored —

    Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers …

  • Unscored —

    Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access co…

  • Unscored —

    Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain …

  • Unscored —

    SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to u…

  • Unscored —

    Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause…

  • Unscored —

    Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execu…

  • Unscored —

    Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former members…

  • Unscored —
    CVE-2010-0520 Public exploit EPSS 19%

    Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attacke…

  • Unscored —

    Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary co…

  • Unscored —

    Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated user…

  • Unscored —

    QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —

    xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecifi…

  • Unscored —

    Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remot…

  • Unscored —

    Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code…

  • Unscored —

    Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which ha…

  • Unscored —

    The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, do…

  • Unscored —

    Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a deni…

  • Unscored —

    The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated…

  • Unscored —

    DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances invol…

  • Unscored —

    Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a …

  • Unscored —

    Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitra…

  • Unscored —

    Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an interne…

  • Unscored —

    Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote …

  • Unscored —

    Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to…

  • Unscored —

    Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs du…

  • Unscored —

    Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary co…

  • Unscored —

    Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to …

  • Unscored —

    CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —

    CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of servic…

  • Unscored —

    AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, whic…

  • Unscored —

    freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArgume…

  • Unscored —

    Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share…

  • Unscored —

    Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to exe…

  • Unscored —

    The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow re…

  • Unscored —

    The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in t…

  • Unscored —
    CVE-2010-1185 Public exploit EPSS 15%

    Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to e…

  • Unscored —

    The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for …