Export limit exceeded: 11120 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 10968 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-0463

Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in (1) SWUTMP or (2) SUCATALOG filenames, or using the (3) application/x-apple.sucatalog+xml MIME type.

CVSS 2.0 · 5.0 Medium EPSS 17.8% KEV · Not listed
Vendors
Apple
Products
Software Update
CVE-2016-1731

Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Apple
Products
Software Update