Latest CVE Feed
-
2.1
LOWCVE-2005-2512
Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak.... Read more
- EPSS Score: %0.06
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2005-2521
Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.... Read more
Affected Products : mac_os_x- EPSS Score: %0.10
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2005-2503
AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window.... Read more
- EPSS Score: %0.07
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2627
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows.... Read more
Affected Products : kismet- EPSS Score: %5.67
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-2622
Cross-site scripting (XSS) vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the (1) max or (2) ctg parameter.... Read more
Affected Products : ecw-shop- EPSS Score: %0.34
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2514
Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.... Read more
Affected Products : mac_os_x- EPSS Score: %0.99
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.6
HIGHCVE-2005-2501
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.... Read more
- EPSS Score: %1.31
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2005-2626
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID.... Read more
Affected Products : kismet- EPSS Score: %3.94
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2520
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.... Read more
Affected Products : mac_os_x- EPSS Score: %0.08
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2516
Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.... Read more
- EPSS Score: %1.07
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2525
CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).... Read more
- EPSS Score: %0.74
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2624
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.... Read more
Affected Products : cpaint- EPSS Score: %0.34
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2621
index.php in ECW-Shop 6.0.2 allows remote attackers to obtain sensitive information via the (1) min or (2) max parameter with a "'" (single quote), which reveals the path in an error message, possibly due to a SQL injection vulnerability.... Read more
Affected Products : ecw-shop- EPSS Score: %0.32
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2127
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use ... Read more
- EPSS Score: %42.71
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2526
CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.... Read more
- EPSS Score: %0.74
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-2523
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.... Read more
- EPSS Score: %0.53
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2005-2519
slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.... Read more
Affected Products : mac_os_x- EPSS Score: %0.04
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2518
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.... Read more
Affected Products : mac_os_x- EPSS Score: %1.61
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2005-2517
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.... Read more
- EPSS Score: %0.30
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2005-2515
Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required.... Read more
Affected Products : mac_os_x- EPSS Score: %0.07
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025