CVE List

Id CVE No. Status Description Phase Votes Comments Actions
99201  CVE-2017-2381  Candidate  An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "sudo" component. It allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server.  Assigned (20161201)  None (candidate not yet proposed)    View
99202  CVE-2017-2382  Candidate  An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors.  Assigned (20161201)  None (candidate not yet proposed)    View
99203  CVE-2017-2383  Candidate  An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves cleartext client-certificate transmission in the "APNs Server" component. It allows man-in-the-middle attackers to track users via correlation with this certificate.  Assigned (20161201)  None (candidate not yet proposed)    View
99204  CVE-2017-2384  Candidate  An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode.  Assigned (20161201)  None (candidate not yet proposed)    View
99205  CVE-2017-2385  Candidate  An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors.  Assigned (20161201)  None (candidate not yet proposed)    View

Page 19841 of 20943, showing 5 records out of 104715 total, starting on record 99201, ending on 99205

Actions