Skip to content
OpenAdvisories

Archive

18 October 2014

Vulnerabilities first published on this day (UTC), newest first.

← September 2014 2014 / October /18 November 2014 →
  1. 18
  2. 254
  3. 330
  4. 429
  5. 56
  6. 628
  7. 720
  8. 842
  9. 96
  10. 1051
  11. 1111
  12. 122
  13. 1316
  14. 1411
  15. 15196
  16. 16126
  17. 1723
  18. 1825
  19. 19244
  20. 20146
  21. 21181
  22. 2219
  23. 2310
  24. 242
  25. 2521
  26. 2612
  27. 2716
  28. 289
  29. 2933
  30. 307
  31. 3129
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2014-4351

    Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a de…

  • Unscored —
    CVE-2014-4434

    The kernel in Apple OS X before 10.10 allows physically proximate attackers to cause a denial of service (NULL pointer …

  • Unscored —
    CVE-2014-4446

    Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows …

  • Unscored —
    CVE-2014-4431

    Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attac…

  • Unscored —
    CVE-2014-4443

    Apple OS X before 10.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted ASN…

  • Unscored —
    CVE-2014-4447

    Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file af…

  • Unscored —
    CVE-2014-4436

    IOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service (out-of-bounds read operation) via a…

  • Unscored —
    CVE-2014-4417

    Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service (universal Push Notification out…

  • Unscored —
    CVE-2014-4437

    LaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox restrictions via an application t…

  • Unscored —
    CVE-2014-4428

    Bluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices, which allows remote attack…

  • Unscored —
    CVE-2014-4427

    App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility …

  • Unscored —
    CVE-2014-4391

    The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bu…

  • Unscored —
    CVE-2014-4442

    The kernel in Apple OS X before 10.10 allows local users to cause a denial of service (panic) via a message to a system…

  • Unscored —
    CVE-2014-4438

    Race condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to obtain access by leve…

  • Unscored —
    CVE-2014-4435

    The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN en…

  • Unscored —
    CVE-2014-4444

    SecurityAgent in Apple OS X before 10.10 does not ensure that a Kerberos ticket is in the cache for the correct user, w…

  • Unscored —
    CVE-2014-4426

    AFP File Server in Apple OS X before 10.10 allows remote attackers to discover the network addresses of all interfaces …

  • Unscored —
    CVE-2014-4441

    NetFS Client Framework in Apple OS X before 10.10 does not ensure that the disabling of File Sharing is always possible…

  • Unscored —
    CVE-2014-4432

    fdesetup in Apple OS X before 10.10 does not properly display the encryption status in between a setting-update action …

  • Unscored —
    CVE-2014-4439

    Mail in Apple OS X before 10.10 does not properly recognize the removal of a recipient address from a message, which ma…

  • Unscored —
    CVE-2014-4430

    CoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in the unlocked state, w…

  • Unscored —
    CVE-2014-4425

    CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver be…

  • Unscored —
    CVE-2014-4440

    The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled m…

  • Unscored —
    CVE-2014-4433

    Heap-based buffer overflow in the kernel in Apple OS X before 10.10 allows physically proximate attackers to execute ar…

  • Unscored —
    CVE-2014-3573

    The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure D…