CVSS: 7.5EPSS: 0%CPEs: 28EXPL: 0CVE-2004-0743
https://notcve.org/view.php?id=CVE-2004-0743
12 Aug 2004 — Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak. Safari para Mac OS X anteriores a 10.3.5, despues de enviar datos de formualarios con el método POST, puede reenviar los datos a un método GET si esa URL es redirigida después de que los datos POST y el usuario utiliza los botones "Atrás" y "Adelante", lo ... • http://lists.apple.com/mhonarc/security-announce/msg00056.html •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2004-0622
https://notcve.org/view.php?id=CVE-2004-0622
30 Jun 2004 — Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. Mac OS 10.3.4 no limpia adecuadamente la memoria de contraseñas de inicio de sesión de usuario, de Keychain o FileVault, lo que podría permitir al usuario root o a un atacante con acceso físico obtener información sensible leyendo l... • http://citp.princeton.edu/pub/coldboot.pdf •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2004-0539
https://notcve.org/view.php?id=CVE-2004-0539
11 Jun 2004 — The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code. El botón "Show in Finder" en el navegador web Safari de Mac OS X 10.3.4 y 10.2.8 puede ejecutar aplicaciones descargadas, lo que pódría permitir a atacantes remotos ejecutar código arbitrario. • http://docs.info.apple.com/article.html?artnum=25785 •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2004-0538
https://notcve.org/view.php?id=CVE-2004-0538
11 Jun 2004 — LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user. LaunchServices en Mac OS X 10.3.4 y 10.2.8 registra automáticamente y ejecuta aplicaciones nuevas, lo que podría permitir a atacantes ejecutar código arbitrario sin avisar al usuario. • http://docs.info.apple.com/article.html?artnum=25785 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2004-0513
https://notcve.org/view.php?id=CVE-2004-0513
03 Jun 2004 — Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls." Vulnerabilidad no especificada en Mac OS X versiones anteriores a 10.3.4, tiene un impacto desconocido y vectores de ataque relacionados con "registro de sucesos cuando se siguen llamadas del sistema". • http://lists.apple.com/archives/security-announce/2004/May/msg00005.html •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2004-0089
https://notcve.org/view.php?id=CVE-2004-0089
03 Mar 2004 — Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable. Desbordamiento de búfer en TruBlueEnvironmet de Mac OS X 10.3.x y 10.2.x permite a usuarios locales ganar privilegios mediante una variable de entorno largo. • http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html •
CVSS: 9.8EPSS: 13%CPEs: 3EXPL: 0CVE-2002-1347
https://notcve.org/view.php?id=CVE-2002-1347
11 Dec 2002 — Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string. Desbordamiento de búfer en la librería Cyrus SASL 2.1.9 y anteriores permite a atacantes remoto... • http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html • CWE-131: Incorrect Calculation of Buffer Size •