|
265001
|
5.5 |
MEDIUM
Local
|
apple
|
mac_os_x
|
Terminal in Apple OS X before 10.12 uses weak permissions for the .bash_history and .bash_session files, which allows local users to obtain sensitive information via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2016-4755
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265002
|
7.5 |
HIGH
Network
|
apple
|
os_x_server
|
ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
|
CWE-310
Cryptographic Issues
|
CVE-2016-4754
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265003
|
7.8 |
HIGH
Local
|
apple
|
watchos tvos iphone_os mac_os_x
|
Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
|
CWE-20
Improper Input Validation
|
CVE-2016-4753
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265004
|
5.5 |
MEDIUM
Local
|
apple
|
mac_os_x
|
The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CF_RETURNS_RETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering…
|
CWE-200
Information Exposure
|
CVE-2016-4752
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265005
|
3.5 |
LOW
Network
|
apple
|
safari
|
The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site.
|
CWE-254
7PK - Security Features
|
CVE-2016-4751
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265006
|
7.8 |
HIGH
Local
|
apple
|
iphone_os mac_os_x
|
S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-4750
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265007
|
5.3 |
MEDIUM
Local
|
apple
|
mac_os_x
|
Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable.
|
CWE-254
7PK - Security Features
|
CVE-2016-4748
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265008
|
5.3 |
MEDIUM
Network
|
apple
|
mac_os_x
|
The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user a…
|
CWE-200
Information Exposure
|
CVE-2016-4745
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265009
|
5.5 |
MEDIUM
Local
|
apple
|
mac_os_x
|
NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app.
|
CWE-200
Information Exposure
|
CVE-2016-4742
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265010
|
3.7 |
LOW
Network
|
apple
|
mac_os_x
|
mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending …
|
CWE-200
Information Exposure
|
CVE-2016-4739
|
2024-11-21 11:52 |
2016-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|