Vulnerabilities > Apple > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-04-03 CVE-2018-4321 Improper Input Validation vulnerability in Apple mac OS X
A validation issue existed in the entitlement verification.
network
low complexity
apple CWE-20
5.3
2019-04-03 CVE-2018-4313 Improper Input Validation vulnerability in Apple Iphone OS and Watchos
A consistency issue existed in the handling of application snapshots.
local
low complexity
apple CWE-20
5.5
2019-04-03 CVE-2018-4309 Cross-site Scripting vulnerability in Apple products
A cross-site scripting issue existed in Safari.
network
low complexity
apple CWE-79
6.1
2019-04-03 CVE-2018-4308 Out-of-bounds Read vulnerability in Apple mac OS X
An out-of-bounds read was addressed with improved bounds checking.
local
low complexity
apple CWE-125
5.5
2019-04-03 CVE-2018-4307 Improper Input Validation vulnerability in Apple Iphone OS
A logic issue was addressed with improved state management.
network
low complexity
apple CWE-20
4.3
2019-04-03 CVE-2018-4305 Improper Input Validation vulnerability in Apple Iphone OS and Watchos
An input validation issue was addressed with improved input validation.
low complexity
apple CWE-20
6.5
2019-04-03 CVE-2018-4304 Improper Input Validation vulnerability in Apple products
A denial of service issue was addressed with improved validation.
local
low complexity
apple CWE-20
5.0
2019-04-03 CVE-2018-4300 Information Exposure vulnerability in Apple Cups
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled.
network
high complexity
apple CWE-200
5.9
2019-04-03 CVE-2018-4293 Improper Input Validation vulnerability in Apple products
A cookie management issue was addressed with improved checks.
network
low complexity
apple CWE-20
5.3
2019-04-03 CVE-2018-4290 Unspecified vulnerability in Apple Iphone OS
A denial of service issue was addressed with improved memory handling.
network
high complexity
apple
5.9