Vulnerabilities

TI-2018-07379 CVE-2018-10470 · GHSA-j3vp-xqjf-c8pj

Improper signature verification in Objective Development Software GmbH Little Snitch

LOW 25

Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not validate all architectures stored in a fat binary.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00638 Published 2018-06-12 No fix listed CWE-347

TI-2017-01921 CVE-2017-2675 · GHSA-c2hm-xxfw-m5qj

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation…

LOW 34

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00303 Published 2017-04-06 No fix listed

TI-2008-03891 CVE-2008-4057 · GHSA-4j8p-jwwx-692v

Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown…

MEDIUM 46

Unspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and attack vectors, related to a "serious security problem."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01495 Published 2008-09-11 No fix listed

TI-2007-02099 CVE-2007-2178 · GHSA-p2ch-5xfx-q36f

Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow…

LOW 37

Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0167 Published 2007-04-24 No fix listed

TI-2006-05036 CVE-2006-5220 · GHSA-jc7h-wrg4-22rv

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ dir…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.14845 Published 2006-10-09 No fix listed CWE-94