GCVE - cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:*

part: o version: 10.10.5 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Mac Os X (`f0578782-d1e8-5b8d-b127-ce7d4203eaaf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-4676`	vulnerable	2026-06-08 05:07:55.102541	Details available A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information. Published: 2020-02-03T17:07:07.000Z Updated: 2024-08-06T00:39:25.983Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93851 http://seclists.org/fulldisclosure/2016/Oct/89 http://www.securitytracker.com/id/1037087 https://packetstormsecurity.com/files/cve/CVE-2016-4676 https://lists.apple.com/archives/security-announce/2016/Oct/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5917`	not_vulnerable	2026-06-08 05:06:50.991731	Details available The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the {..,..,..}/* substring. Published: 2015-10-09T01:00:00.000Z Updated: 2024-08-06T07:06:34.563Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033703 https://www.youtube.com/watch?v=MBK4QYkUm10 https://cxsecurity.com/issue/WLB-2013040082 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html https://support.apple.com/HT205267	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3415`	vulnerable	2026-06-08 05:06:38.254747	Details available The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement. Published: 2015-04-24T17:00:00.000Z Updated: 2024-08-06T05:47:57.679Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-1635.html http://www.securitytracker.com/id/1033703 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.securityfocus.com/bid/74228 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3414`	vulnerable	2026-06-08 05:06:38.253402	Details available SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement. Published: 2015-04-24T17:00:00.000Z Updated: 2024-08-06T05:47:57.689Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-1635.html http://www.securitytracker.com/id/1033703 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.securityfocus.com/bid/74228 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.