260641
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypa…
|
CWE-200
Information Exposure
|
CVE-2013-0982
|
2013-06-6 00:13 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260642
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-0975
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260643
|
- |
|
apple
|
mac_os_x
|
Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-0983
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260644
|
- |
|
apple
|
mac_os_x
|
Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) …
|
CWE-287
Improper Authentication
|
CVE-2013-0985
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260645
|
- |
|
apple
|
mac_os_x mac_os_x_server
|
SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-0990
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260646
|
- |
|
apple
|
safari
|
XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2013-1013
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260647
|
- |
|
apple
|
safari
|
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differ…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-1023
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260648
|
- |
|
apple
|
mac_os_x
|
The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the _POSIX_SPAWN_DISABLE_ASLR and _POSIX_SPAWN_ALLOW_DATA_EXEC flags for setuid and setgid programs, whi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3949
|
2013-06-5 23:39 |
2013-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260649
|
- |
|
apple
|
mac_os_x
|
IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2013-0976
|
2013-06-5 13:00 |
2013-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260650
|
- |
|
typo3
|
typo3
|
SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL com…
|
CWE-89
SQL Injection
|
CVE-2013-1842
|
2013-06-5 12:42 |
2013-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|