CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Nov 2, 2026, 2:50 AM ET)

What this means for you

This week: 3,474 CVEs published, 268 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,474; Show in the list
Critical, last 7 days: 268; Show in the list
Healthcare-tagged, last 7 days: 2; Show in the list
Known exploited (CISA KEV): 1,765; Show in the list

Showing CVEs that name the product apple:mac_os_x_server. Show all products

610 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2002-0666	Medium 5.0	IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via s…	Nov 4, 2002
CVE-2002-1265	Medium 5.0	The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (ha…	Nov 12, 2002
CVE-2002-1347	Critical 9.8	Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonica…	Dec 18, 2002
CVE-2003-0049	High 7.5	Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.	Mar 3, 2003
CVE-2003-0198	Medium 6.4	Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.	May 5, 2003
CVE-2003-0171	High 7.2	DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a d…	May 5, 2003
CVE-2003-0518	Medium 4.6	The screen saver in MacOS X allows users with physical access to cause the screen saver to crash and gain access to the underlying session via a large number of characters in the password field, poss…	Aug 18, 2003
CVE-2003-0466	Critical 9.8	Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via command…	Aug 27, 2003
CVE-2003-0694	High 10.0	The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.	Oct 6, 2003
CVE-2003-0681	High 7.5	A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequence…	Oct 6, 2003

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.