CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Nov 2, 2026, 2:40 AM ET)

What this means for you

This week: 3,473 CVEs published, 268 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,473; Show in the list
Critical, last 7 days: 268; Show in the list
Healthcare-tagged, last 7 days: 2; Show in the list
Known exploited (CISA KEV): 1,765; Show in the list

Showing CVEs that name the product apple:darwin_streaming_server. Show all products

9 CVEs

Showing 1 to 9.

CVE	Severity	Title	Published
CVE-2004-1089	Medium 4.6	Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.	Dec 2, 2004
CVE-2004-1088	High 7.5	Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.	Dec 2, 2004
CVE-2004-1087	Low 2.1	Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.	Dec 2, 2004
CVE-2004-1086	High 7.5	Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.	Dec 2, 2004
CVE-2004-1085	Low 2.1	Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.	Dec 2, 2004
CVE-2004-1084	Medium 5.0	Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, w…	Dec 2, 2004
CVE-2004-1081	Low 2.1	The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other appl…	Dec 2, 2004
CVE-2004-1083	High 7.5	Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attack…	Dec 3, 2004
CVE-2004-1123	Medium 5.0	Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.	Jan 10, 2005

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.