10.15.6

DATE	CVE	VULNERABILITY TITLE	RISK
2021-04-02	CVE-2020-27914	Out-of-bounds Write vulnerability in Apple mac OS X A memory corruption issue was addressed with improved input validation. local low complexity apple CWE-787	7.8
2021-04-02	CVE-2020-27908	Out-of-bounds Read vulnerability in Apple products An out-of-bounds read was addressed with improved input validation. local low complexity apple CWE-125	7.8
2021-04-02	CVE-2020-27897	Out-of-bounds Write vulnerability in Apple mac OS X and Macos An out-of-bounds write issue was addressed with improved bounds checking. local low complexity apple CWE-787	7.8
2021-04-02	CVE-2020-10015	Out-of-bounds Write vulnerability in Apple mac OS X and Macos An out-of-bounds write issue was addressed with improved bounds checking. local low complexity apple CWE-787	7.8
2021-04-02	CVE-2020-10001	Improper Input Validation vulnerability in multiple products An input validation issue was addressed with improved memory handling. local low complexity apple debian CWE-20	5.5
2020-12-14	CVE-2020-8286	Improper Certificate Validation vulnerability in multiple products curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. network low complexity haxx fedoraproject debian netapp apple siemens oracle splunk CWE-295	7.5
2020-12-14	CVE-2020-8285	Uncontrolled Recursion vulnerability in multiple products curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. network low complexity haxx debian fedoraproject netapp apple oracle fujitsu siemens splunk CWE-674	7.5
2020-12-14	CVE-2020-8284	A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. network high complexity haxx fedoraproject debian netapp apple oracle fujitsu siemens splunk	3.7
2020-12-08	CVE-2020-9991	Unspecified vulnerability in Apple products This issue was addressed with improved checks. network low complexity apple	7.5
2020-12-08	CVE-2020-27896	Path Traversal vulnerability in Apple mac OS X and Macos A path handling issue was addressed with improved validation. local low complexity apple CWE-22	5.5