Vulnerabilities > Apple > MAC OS X > 10.7.2

DATE CVE VULNERABILITY TITLE RISK
2017-06-20 CVE-2017-3167 Improper Authentication vulnerability in multiple products
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
network
low complexity
apache netapp redhat apple debian oracle CWE-287
critical
 9.8
9.8
2017-05-23 CVE-2016-9843 The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
network
low complexity
zlib opensuse debian canonical oracle redhat apple netapp mariadb nodejs
critical
 9.8
9.8
2017-05-23 CVE-2016-9842 The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers. 8.8
8.8
2017-05-23 CVE-2016-9841 inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
network
low complexity
zlib opensuse debian canonical oracle redhat apple netapp nodejs
critical
 9.8
9.8
2017-05-23 CVE-2016-9840 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. 8.8
8.8
2017-05-22 CVE-2017-6991 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS and mac OS X
An issue was discovered in certain Apple products.
network
apple CWE-119
6.8
6.8
2017-05-22 CVE-2017-6990 Unspecified vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
network
apple
4.3
4.3
2017-05-22 CVE-2017-6988 Improper Certificate Validation vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
network
apple CWE-295
4.3
4.3
2017-05-22 CVE-2017-6987 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
apple CWE-200
4.3
4.3
2017-05-22 CVE-2017-6986 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
network
apple CWE-119
6.8
6.8