Objective Development

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-10470 Jun 12, 17:29 MEDIUM This Month

Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not validate all architectures stored in a. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Little Snitch Objective Development

NVD

CVSS 3.1

5.3

EPSS

0.6%

CVE-2017-2675 Apr 06, 15:59 HIGH This Week

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Little Snitch Objective Development Obdev

NVD

CVSS 3.0

7.8

EPSS

0.1%

CVE-2018-10470

EPSS 1% CVSS 5.3

MEDIUM This Month

Information Disclosure Jwt Attack Little Snitch +1

NVD

CVE-2017-2675

EPSS 0% CVSS 7.8

HIGH This Week

Privilege Escalation Little Snitch Objective Development +1

NVD