Os X Server (Apple) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2016-09-25. Vendor: Apple.
CVEs of Os X Server
- CVE-2016-4754 - CVSS 7.5 (high), 2016-09-25: ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms…
- CVE-2016-4694 - CVSS 9.1 (critical), 2016-09-25: The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from…
- CVE-2015-5477 - CVSS 7.5 (high), 2015-07-29: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…
- CVE-2015-1151 - CVSS 5 (medium), 2015-04-28: Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad…
- CVE-2015-1150 - CVSS 5 (medium), 2015-04-28: The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass…
- CVE-2014-3583 - CVSS 5 (medium), 2014-12-15: The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial…
- CVE-2014-4447 - CVSS 1.9 (low), 2014-10-18: Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile…
- CVE-2014-4446 - CVSS 2.1 (low), 2014-10-18: Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass…
- CVE-2014-4424 - CVSS 7.5 (high), 2014-09-19: SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute…
- CVE-2014-4406 - CVSS 6.1 (medium), 2014-09-19: Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary…
- CVE-2013-5143 - CVSS 6.8 (medium), 2013-10-24: The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow…
- CVE-2013-1034 - CVSS 4.3 (medium), 2013-09-19: Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script…
