Max CVSS 10.0 Min CVSS 2.1 Total Count28
IDCVSSSummaryLast (major) updatePublished
CVE-2018-4176 4.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4175 6.8
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4174 4.3
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an incons
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4170 2.1
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Admin Framework" component. It allows local users to discover a password by listing a process and its arguments during sysadminctl execution.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4164 10.0
An issue was discovered in certain Apple products. Xcode before 9.3 is affected. The issue, which is unspecified, involves the "LLVM" component.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4160 9.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) vi
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4158 7.6
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. watchOS before 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows attackers to execute arbitrar
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4156 7.6
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "PluginKit" component. A race condition allows attackers to execute arbitrary code in a privileged context via a
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4154 7.6
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a cr
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4152 7.6
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4151 7.6
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "iCloud Drive" component. A race condition allows attackers to execute arbitrary code in a privileged context via
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4144 9.3
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4139 9.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4138 4.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4136 9.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) vi
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4135 9.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corru
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4133 4.3
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a craft
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4132 9.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4131 4.3
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keyst
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4112 4.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sensitive information by leveraging symlink mishandling.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4111 4.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4108 7.5
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4107 4.3
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4106 6.8
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4105 7.5
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "APFS" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2018-4102 4.3
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
03-04-2018 - 02:29 03-04-2018 - 02:29
CVE-2017-1756 2.1
IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
30-03-2018 - 12:29 30-03-2018 - 12:29
CVE-2004-0411 7.5
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to th
17-10-2016 - 22:45 07-07-2004 - 00:00
Back to Top Mark selected
Back to Top