obdev: CVE Program partner

CVEs, 365 days014 all time, 8 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	Objective Development Software GmbH
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Objective Development issues only.
Advisories	https://obdev.at/cve/published-vulnerabilities.html

CVE-2020-13095 2020-06-30
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the pat
CVE-2019-13013 2019-08-23
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an
CVE-2019-13014 2019-08-23
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper whic
CVE-2018-10470 2018-06-12
Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not va
CVE-2017-2675 2017-04-06
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the instal
CVE-2016-8661 2016-11-15
Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privile

obdev