Ftp Servers For Mac Os X

An FTP client lets you easily transfer your file in between two computers like your computer and web-hosting server. If you go out and search for a free FTP Client for mac, there are dime a dozen. At the end of the day, you will come back with a bag full of the best mac FTP clients to choose from and you will have to arrange them according to your needs and ease.

The best mac FTP client needs to be fast, secure and also a free FTP client. If that’s easy to use, that is an icing on the cake. Keep security as your main concern as you’re going to use it for everything from transferring files between computers to transferring files to your server.

GoAnywhere MFT is a Managed File Transfer and Secure FTP solution that will automate and secure file transfers with your trading partners, customers and enterprise servers. GoAnywhere MFT installs on Mac OS X, as well as many other operating systems. HelpSystems is.
Apr 17, 2020 There are lots of FTP servers available but many of them are only usable at a cost. Below is a list of the very best freeware FTP server programs that run on Windows, macOS, and Linux—you can download and use them to share files as often as you like without paying a dime.

There are two different kinds of a FTP client:

Paid FTP client
and, free FTP client for mac

Sep 24, 2015 OS X Server 5 (for El Capitan and Yosemite) sees little change with the FTP Service. Instead of sharing out each directory the new incantation of the FTP service allows administrators to share a single directory out. This directory can be any share that has previously been configured in the File Sharing service or a website Continue reading Setup FTP in OS X Server 5 for El Capitan.

While Paid FTP clients are good in their own ways, there are many times when a free FTP client for mac is also as secure as a paid one. So, today, we are giving you the list of 10 best FTP clients for Mac out there so that you don’t have to confuse yourself with the jargon out there.

Filezilla: The Best Mac FTP Client

Filezilla is the best mac FTP client and tops the list of the best FTP clients for mac. Filezilla is a free FTP client. Filezilla is an FTP software which is generally used to transfer files between two hosts (eg. from your local machine to your server). It is cross-platform which means it is available for all operating systems.

Filezilla supports FTP (file transfer protocol), SFTP(ssh file transfer protocol) and FTPS. Know How to Install Filezilla on Mac OS X.

CyberDuck

Cyberduck tops the list of the best FTP clients for mac just because of one reason: it’s awesome to use. The reason is the wide support of platforms it offers for free. Cyberduck supports Amazon, Rackspace and Google Cloud Files.

Cyberduck is available in a variety of languages with an easy and appealing interface across all major platforms. Historically, Cyberduck has been the best choice for all the Mac Users since its launch. Recently, the FTP client was released for Windows also.

Stuffit for mac

Stuffit lets you compress your images, files, videos using a complex compression algorithm that doesn’t impact the quality and you can upload it or transfer it to any service out there like dropbox, Google Drive or One Drive. It also supports FTP, email, cloud storage integration and more.

The best part of the software is the archive function that lets you search from tar , RAR and all major zip file formats without any need to expand them. However, Stuffit is just a free to try FTP client for mac.

Fetch

Released in 1989, Fetch is one of the best FTP Clients available out there for Mac. Fetch offers quick look previews, web view and features like Droplet shortcuts that make using it quite easier. If you’re a kind of person that keeps on repeating some actions over your server, Fetch Automator is the thing for you. Fetch is just a free to try FTP software for mac.

NetFinder for mac

Netfinder supports a number of protocols like FTP with SSL encryption, SFTP and many more. Just like Fetch, NetFinder also supports one-click automation and multimedia previews are an icing on the cake. Net finder feels like Home with near to Mac interface for the software. However, it is a paid software.

Classic FTP Free for mac

Classic FTP is a free file transfer software for Mac that lets you transfer files between systems easily. It sends data encrypted using FTP-SSL and is compatible with all popular FTP server. Classic FTP server is compatible with Mac OS 10.4 and above.

Yummy FTP

Yummy FTP is a powerful FTP client for Mac that uses powerful encryption to make sure that your data is secure at any point of time. Apart from this, the software integrates the Dropbox sync and bookmark Manager into the software.

You can schedule automatic backups if there are a thousand files to transfer or you have to update your web server overnight. If you’d like to give this software a go, Yummy provides a 30 days free support.

Ftp Server For Mac

Transmit

Transmit FTP was developed by Panic and this is one of the best FTP clients for transferring your files from one location to another. Transmit 4 is the latest version of Transmit and takes advantages of the Mac OS fully. It supports the .Mac format as well as iDisk/ WebDAV. Transmit also offers uploads using the desktop widget or dock on your Mac. This Mac FTP client is a free to try software.

Cute FTP

Cute FTP is a powerful file transfer client for Mac that uses secure shell 2 (SFTP) and SSL protocol to transfer your files. You can split a transfer into multiple files and recombine it on completion. You can transfer multiple files while at the same time navigate between the sites continuously.

Cute FTP supports Mac OS X 10.4 and above and updated version of Safari, Chrome, and Mozilla Firefox. Cute FTP is a Free to try FTP client for mac.

Captain FTP

Captain FTP is an intelligent FTP client that uses a technique called Sync browsing. Sync Browsing lets you browse folders locally when the local and remote directory structure match. The remote folder then automatically follows the local folder in that case.

Captain FTP supports drag and drop, growl alerts, synchronization, and much more than a normal client. The only con to the FTP service is that it can transfer a maximum of 2 GB data only.

Lovely FTP

Ftp Server Mac Os X Mojave

Lovely FTP has a neat feature called virtual folder located right on your desktop. You can drag and drop your files into the folder and it automatically starts transferring it.Simple Setting, Authentication, Proxy, Upload/ Download and reload functions make it an easy software to run and handle. Lovely FTP has the powerful functions for professional users while it holds the decency of a normal FTP software on the bay.

FTP Voyager

It supports FTP, SFTP and FTPS transfers over IPv4/IPv6, and includes file transfer scheduling and folder synchronization utilities, both manual and automated folder synchronization. File transfer scheduling can be automated using the scheduler.

You can also take Post-Transfer Actions like Send email, delete files, run programs, shut down and perform other actions after you transfer files through FTP Voyager.

(3 votes, average: 3.33 out of 5)

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.

For information about the Apple Product Security PGP Key, see How to use the Apple Product Security PGP Key.

Where possible, CVE IDs are used to reference the vulnerabilities for further information.

To learn about other security updates, see Apple security updates.

OS X El Capitan v10.11

Address Book
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book framework
Description: An issue existed in Address Book framework's handling of an environment variable. This issue was addressed through improved environment variable handling.
CVE-ID
CVE-2015-5897 : Dan Bastone of Gotham Digital Science

AirScan
Available for: Mac OS X v10.6.8 and later
Impact: An attacker with a privileged network position may be able to extract payload from eSCL packets sent over a secure connection
Description: An issue existed in the processing of eSCL packets. This issue was addressed through improved validation checks.
CVE-ID
CVE-2015-5853 : an anonymous researcher

apache_mod_php
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in PHP
Description: Multiple vulnerabilities existed in PHP versions prior to 5.5.27, including one which may have led to remote code execution. This issue was addressed by updating PHP to version 5.5.27.
CVE-ID
CVE-2014-9425
CVE-2014-9427
CVE-2014-9652
CVE-2014-9705
CVE-2014-9709
CVE-2015-0231
CVE-2015-0232
CVE-2015-0235
CVE-2015-0273
CVE-2015-1351
CVE-2015-1352
CVE-2015-2301
CVE-2015-2305
CVE-2015-2331
CVE-2015-2348
Java Download Download Java for your desktop computer now! Version 8 Update 251 Release date April 14, 2020 Important Oracle Java License Update The Oracle Java License has changed for releases starting April 16, 2019. Mar 23, 2016 Get Java for your Mac. Download Java for OS X directly from Oracle. Get the latest version. If an app or webpage you want to use asks you to install Java software, you can download the current version of Java for OS X directly from Oracle's website. Java version(s): 8.0 macOS Sierra was released by Apple in September 2016. Java is compatible with this version, however, few Java issues have been reported on Sierra. Oct 24, 2019 Mac mini introduced in mid 2010 or later iMac introduced in late 2009 or later Mac Pro introduced in mid 2010 or later. To find your Mac model, memory, storage space, and macOS version, choose About This Mac from the Apple menu. If your Mac isn't compatible with macOS Sierra, the installer will let you know. On my High Sierra Mac. Java -version gives. Java version '1.8.0172' Java(TM) SE Runtime Environment (build 1.8.0172-b11) Java HotSpot(TM) 64-Bit Server VM (build 25.172-b11, mixed mode) but in Oracle's documentation and list of downloads I see references to versions. Java 8 download for mac sierra pro.
CVE-2015-2783
CVE-2015-2787
CVE-2015-3329
CVE-2015-3330

Apple Online Store Kit
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application may gain access to a user's keychain items
Description: An issue existed in validation of access control lists for iCloud keychain items. This issue was addressed through improved access control list checks.
CVE-ID
CVE-2015-5836 : XiaoFeng Wang of Indiana University, Luyi Xing of Indiana University, Tongxin Li of Peking University, Tongxin Li of Peking University, Xiaolong Bai of Tsinghua University

AppleEvents
Available for: Mac OS X v10.6.8 and later
Impact: A user connected through screen sharing can send Apple Events to a local user's session
Description: An issue existed with Apple Event filtering that allowed some users to send events to other users. This was addressed by improved Apple Event handling.
CVE-ID
CVE-2015-5849 : Jack Lawrence (@_jackhl)

Audio
Available for: Mac OS X v10.6.8 and later
Impact: Playing a malicious audio file may lead to an unexpected application termination
Description: A memory corruption issue existed in the handling of audio files. This issue issue was addressed through improved memory handling.
CVE-ID
CVE-2015-5862 : YoungJin Yoon of Information Security Lab. (Adv.: Prof. Taekyoung Kwon), Yonsei University, Seoul, Korea

bash
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in bash
Description: Multiple vulnerabilities existed in bash versions prior to 3.2 patch level 57. These issues were addressed by updating bash version 3.2 to patch level 57.
CVE-ID
CVE-2014-6277
CVE-2014-7186
CVE-2014-7187
Certificate Trust Policy
Available for: Mac OS X v10.6.8 and later
Impact: Update to the certificate trust policy
Description: The certificate trust policy was updated. The complete list of certificates may be viewed at https://support.apple.com/kb/HT202858.

CFNetwork Cookies
Available for: Mac OS X v10.6.8 and later
Impact: An attacker in a privileged network position can track a user's activity
Description: A cross-domain cookie issue existed in the handling of top level domains. The issue was address through improved restrictions of cookie creation.
CVE-ID
CVE-2015-5885 : Xiaofeng Zheng of Blue Lotus Team, Tsinghua University

CFNetwork FTPProtocol
Available for: Mac OS X v10.6.8 and later
Impact: Malicious FTP servers may be able to cause the client to perform reconnaissance on other hosts
Description: An issue existed in the handling of FTP packets when using the PASV command. This issue was resolved through improved validation.
CVE-ID
CVE-2015-5912 : Amit Klein

CFNetwork HTTPProtocol
Available for: Mac OS X v10.6.8 and later
Impact: A maliciously crafted URL may be able to bypass HSTS and leak sensitive data
Description: A URL parsing vulnerability existed in HSTS handling. This issue was addressed through improved URL parsing.
CVE-ID
CVE-2015-5858 : Xiaofeng Zheng of Blue Lotus Team, Tsinghua University
CFNetwork HTTPProtocol
Available for: Mac OS X v10.6.8 and later
Impact: An attacker with a privileged network position may be able to intercept network traffic
Description: An issue existed in the handling of HSTS preload list entries in Safari private browsing mode. This issue was addressed through improved state handling.
CVE-ID
CVE-2015-5859 : Rosario Giustolisi of University of Luxembourg

CFNetwork HTTPProtocol
Available for: Mac OS X v10.6.8 and later
Impact: A malicious website may be able to track users in Safari private browsing mode
Description: An issue existed in the handling of HSTS state in Safari private browsing mode. This issue was addressed through improved state handling.
CVE-ID
CVE-2015-5860 : Sam Greenhalgh of RadicalResearch Ltd

CFNetwork Proxies
Available for: Mac OS X v10.6.8 and later
Impact: Connecting to a malicious web proxy may set malicious cookies for a website
Description: An issue existed in the handling of proxy connect responses. This issue was addressed by removing the set-cookie header while parsing the connect response.
CVE-ID
CVE-2015-5841 : Xiaofeng Zheng of Blue Lotus Team, Tsinghua University

CFNetwork SSL
Available for: Mac OS X v10.6.8 and later
Impact: An attacker with a privileged network position may intercept SSL/TLS connections
Description: A certificate validation issue existed in NSURL when a certificate changed. This issue was addressed through improved certificate validation.
CVE-ID
CVE-2015-5824 : Timothy J. Wood of The Omni Group

CFNetwork SSL
Available for: Mac OS X v10.6.8 and later
Impact: An attacker may be able to decrypt data protected by SSL
Description: There are known attacks on the confidentiality of RC4. An attacker could force the use of RC4, even if the server preferred better ciphers, by blocking TLS 1.0 and higher connections until CFNetwork tried SSL 3.0, which only allows RC4. This issue was addressed by removing the fallback to SSL 3.0.

CoreCrypto
Available for: Mac OS X v10.6.8 and later
Impact: An attacker may be able to determine a private key
Description: By observing many signing or decryption attempts, an attacker may have been able to determine the RSA private key. This issue was addressed using improved encryption algorithms.

CoreText
Available for: Mac OS X v10.6.8 and later
Impact: Processing a maliciously crafted font file may lead to arbitrary code execution
Description: A memory corruption issue existed in the processing of font files. This issue was addressed through improved input validation.
CVE-ID
CVE-2015-5874 : John Villamil (@day6reak), Yahoo Pentest Team

Dev Tools
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue existed in dyld. This was addressed through improved memory handling.
CVE-ID
CVE-2015-5876 : beist of grayhash

Dev Tools
Available for: Mac OS X v10.6.8 and later
Impact: An application may be able to bypass code signing
Description: An issue existed with validation of the code signature of executables. This issue was addressed through improved bounds checking.
CVE-ID
CVE-2015-5839 : @PanguTeam

Disk Images
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with system privileges
Description: A memory corruption issue existed in DiskImages. This issue was addressed through improved memory handling.
CVE-ID
CVE-2015-5847 : Filippo Bigarella, Luca Todesco

dyld
Available for: Mac OS X v10.6.8 and later
Impact: An application may be able to bypass code signing
Description: An issue existed with validation of the code signature of executables. This issue was addressed through improved bounds checking.
CVE-ID
CVE-2015-5839 : TaiG Jailbreak Team

Ftp Servers For Mac Os X El Capitan

EFI
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application can prevent some systems from booting
Description: An issue existed with the addresses covered by the protected range register. This issue was fixed by changing the protected range.
CVE-ID
CVE-2015-5900 : Xeno Kovah & Corey Kallenberg from LegbaCore

EFI
Available for: Mac OS X v10.6.8 and later
Impact: A malicious Apple Ethernet Thunderbolt adapter may be able to affect firmware flashing
Description: Apple Ethernet Thunderbolt adapters could modify the host firmware if connected during an EFI update. This issue was addressed by not loading option ROMs during updates.
CVE-ID
CVE-2015-5914 : Trammell Hudson of Two Sigma Investments and snare

Finder
Available for: Mac OS X v10.6.8 and later
Impact: The 'Secure Empty Trash' feature may not securely delete files placed in the Trash
Description: An issue existed in guaranteeing secure deletion of Trash files on some systems, such as those with flash storage. This issue was addressed by removing the 'Secure Empty Trash' option.
CVE-ID
CVE-2015-5901 : Apple

Game Center
Available for: Mac OS X v10.6.8 and later
Impact: A malicious Game Center application may be able to access a player's email address
Description: An issue existed in Game Center in the handling of a player's email. This issue was addressed through improved access restrictions.
CVE-ID
CVE-2015-5855 : Nasser Alnasser

Heimdal
Available for: Mac OS X v10.6.8 and later
Impact: An attacker may be able to replay Kerberos credentials to the SMB server
Description: An authentication issue existed in Kerberos credentials. This issue was addressed through additional validation of credentials using a list of recently seen credentials.
CVE-ID
CVE-2015-5913 : Tarun Chopra of Microsoft Corporation, U.S. and Yu Fan of Microsoft Corporation, China

ICU
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in ICU
Description: Multiple vulnerabilities existed in ICU versions prior to 53.1.0. These issues were addressed by updating ICU to version 55.1.
CVE-ID
CVE-2014-8146 : Marc Deslauriers
CVE-2014-8147 : Marc Deslauriers
CVE-2015-5922 : Mark Brand of Google Project Zero

Install Framework Legacy
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to gain root privileges
Description: A restriction issue existed in the Install private framework containing a privileged executable. This issue was addressed by removing the executable.
CVE-ID
CVE-2015-5888 : Apple

Intel Graphics Driver
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with system privileges
Description: Multiple memory corruption issues existed in the Intel Graphics Driver. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-5830 : Yuki MIZUNO (@mzyy94)
CVE-2015-5877 : Camillus Gerard Cai

IOAudioFamily
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to determine kernel memory layout
Description: An issue existed in IOAudioFamily that led to the disclosure of kernel memory content. This issue was addressed by permuting kernel pointers.
CVE-ID
CVE-2015-5864 : Luca Todesco

IOGraphics
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with kernel privileges
Description: Multiple memory corruption issues existed in the kernel. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-5871 : Ilja van Sprundel of IOActive
CVE-2015-5872 : Ilja van Sprundel of IOActive
CVE-2015-5873 : Ilja van Sprundel of IOActive
CVE-2015-5890 : Ilja van Sprundel of IOActive

IOGraphics
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application may be able to determine kernel memory layout
Description: An issue existed in IOGraphics which could have led to the disclosure of kernel memory layout. This issue was addressed through improved memory management.
CVE-ID
CVE-2015-5865 : Luca Todesco

IOHIDFamily
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: Multiple memory corruption issues existed in IOHIDFamily. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-5866 : Apple
CVE-2015-5867 : moony li of Trend Micro

IOStorageFamily
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker may be able to read kernel memory
Description: A memory initialization issue existed in the kernel. This issue was addressed through improved memory handling.
CVE-ID
CVE-2015-5863 : Ilja van Sprundel of IOActive

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with kernel privileges
Description: Multiple memory corruption issues existed in the Kernel. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-5868 : Cererdlong of Alibaba Mobile Security Team
CVE-2015-5896 : Maxime Villard of m00nbsd
CVE-2015-5903 : CESG

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local process can modify other processes without entitlement checks
Description: An issue existed where root processes using the processor_set_tasks API were allowed to retrieve the task ports of other processes. This issue was addressed through additional entitlement checks.
CVE-ID
CVE-2015-5882 : Pedro Vilaça, working from original research by Ming-chieh Pan and Sung-ting Tsai; Jonathan Levin

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker may control the value of stack cookies
Description: Multiple weaknesses existed in the generation of user space stack cookies. These issues were addressed through improved generation of stack cookies.
CVE-ID
CVE-2013-3951 : Stefan Esser

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: An attacker may be able to launch denial of service attacks on targeted TCP connections without knowing the correct sequence number
Description: An issue existed in xnu's validation of TCP packet headers. This issue was addressed through improved TCP packet header validation.
CVE-ID
CVE-2015-5879 : Jonathan Looney

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: An attacker in a local LAN segment may disable IPv6 routing
Description: An insufficient validation issue existed in the handling of IPv6 router advertisements that allowed an attacker to set the hop limit to an arbitrary value. This issue was addressed by enforcing a minimum hop limit.
CVE-ID
CVE-2015-5869 : Dennis Spindel Ljungmark

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to determine kernel memory layout
Description: An issue existed that led to the disclosure of kernel memory layout. This was addressed through improved initialization of kernel memory structures.
CVE-ID
CVE-2015-5842 : beist of grayhash

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to determine kernel memory layout
Description: An issue existed in debugging interfaces that led to the disclosure of memory content. This issue was addressed by sanitizing output from debugging interfaces.
CVE-ID
CVE-2015-5870 : Apple

Kernel
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to cause a system denial of service
Description: A state management issue existed in debugging functionality. This issue was addressed through improved validation.
CVE-ID
CVE-2015-5902 : Sergi Alvarez (pancake) of NowSecure Research Team

libc
Available for: Mac OS X v10.6.8 and later
Impact: A remote attacker may be able to cause arbitrary code execution
Description: A memory corruption issue existed in the fflush function. This issue was addressed through improved memory handling.
CVE-ID
CVE-2014-8611 : Adrian Chadd and Alfred Perlstein of Norse Corporation

libpthread
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue existed in the kernel. This issue was addressed through improved memory handling.
CVE-ID
CVE-2015-5899 : Lufeng Li of Qihoo 360 Vulcan Team

libxpc
Available for: Mac OS X v10.6.8 and later
Impact: Many SSH connections could cause a denial of service
Description: launchd had no limit on the number of processes that could be started by a network connection. This issue was addressed by limiting the number of SSH processes to 40.
CVE-ID
CVE-2015-5881 : Apple

Login Window
Available for: Mac OS X v10.6.8 and later
Impact: The screen lock may not engage after the specified time period
Description: An issue existed with captured display locking. The issue was addressed through improved lock handling.
CVE-ID
CVE-2015-5833 : Carlos Moreira, Rainer Dorau of rainer dorau informationsdesign, Chris Nehren, Kai Takac, Hans Douma, Toni Vaahtera, and Jon Hall of Asynchrony

lukemftpd
Available for: Mac OS X v10.6.8 and later
Impact: A remote attacker may be able to deny service to the FTP server
Description: A glob-processing issue existed in tnftpd. This issue was addressed through improved glob validation.
CVE-ID
CVE-2015-5917 : Maksymilian Arciemowicz of cxsecurity.com

Mail
Available for: Mac OS X v10.6.8 and later
Impact: Printing an email may leak sensitive user information
Description: An issue existed in Mail which bypassed user preferences when printing an email. This issue was addressed through improved user preference enforcement.
CVE-ID
CVE-2015-5881 : Owen DeLong of Akamai Technologies, Noritaka Kamiya, Dennis Klein from Eschenburg, Germany, Jeff Hammett of Systim Technology Partners

Mail
Available for: Mac OS X v10.6.8 and later
Impact: An attacker in a privileged network position may be able to intercept attachments of S/MIME-encrypted e-mail sent via Mail Drop
Description: An issue existed in handling encryption parameters for large email attachments sent via Mail Drop. The issue is addressed by no longer offering Mail Drop when sending an encrypted e-mail.
CVE-ID
CVE-2015-5884 : John McCombs of Integrated Mapping Ltd

Multipeer Connectivity
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker may be able to observe unprotected multipeer data
Necrobot for mac os x. Description: An issue existed in convenience initializer handling in which encryption could be actively downgraded to a non-encrypted session. This issue was addressed by changing the convenience initializer to require encryption.
CVE-ID
CVE-2015-5851 : Alban Diquet (@nabla_c0d3) of Data Theorem

NetworkExtension
Available for: Mac OS X v10.6.8 and later
Impact: A malicious application may be able to determine kernel memory layout
Description: An uninitialized memory issue in the kernel led to the disclosure of kernel memory content. This issue was addressed through improved memory initialization.
CVE-ID
CVE-2015-5831 : Maxime Villard of m00nbsd

Notes
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to leak sensitive user information
Description: An issue existed in parsing links in the Notes application. This issue was addressed through improved input validation.
CVE-ID
CVE-2015-5878 : Craig Young of Tripwire VERT, an anonymous researcher

Notes
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to leak sensitive user information
Description: A cross-site scripting issue existed in parsing text by the Notes application. This issue was addressed through improved input validation.
CVE-ID
CVE-2015-5875 : xisigr of Tencent's Xuanwu LAB (www.tencent.com)

OpenSSH
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in OpenSSH
Description: Multiple vulnerabilities existed in OpenSSH versions prior to 6.9. These issues were addressed by updating OpenSSH to version 6.9.
CVE-ID
CVE-2014-2532

Free Ftp Servers For Mac

OpenSSL
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in OpenSSL
Description: Multiple vulnerabilities existed in OpenSSL versions prior to 0.9.8zg. These were addressed by updating OpenSSL to version 0.9.8zg.
CVE-ID
CVE-2015-0286
CVE-2015-0287
procmail
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in procmail
Description: Multiple vulnerabilities existed in procmail versions prior to 3.22. These issues were addressed by removing procmail.
CVE-ID
CVE-2014-3618

remote_cmds
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with root privileges
Description: An issue existed in the usage of environment variables by the rsh binary. This issue was addressed by dropping setuid privileges from the rsh binary.
CVE-ID
CVE-2015-5889 : Philip Pettersson

removefile
Available for: Mac OS X v10.6.8 and later
Impact: Processing malicious data may lead to unexpected application termination
Description: An overflow fault existed in the checkint division routines. This issue was addressed with improved division routines.
CVE-ID
CVE-2015-5840 : an anonymous researcher

Ruby
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in Ruby
Description: Multiple vulnerabilities existed in Ruby versions prior to 2.0.0p645. These were addressed by updating Ruby to version 2.0.0p645.
CVE-ID
CVE-2014-8080
CVE-2014-8090
CVE-2015-1855

Security
Available for: Mac OS X v10.6.8 and later
Impact: The lock state of the keychain may be incorrectly displayed to the user
Description: A state management issue existed in the way keychain lock status was tracked. This issue was addressed through improved state management.
CVE-ID
CVE-2015-5915 : Peter Walz of University of Minnesota, David Ephron, Eric E. Lawrence, Apple

Security
Available for: Mac OS X v10.6.8 and later
Impact: A trust evaluation configured to require revocation checking may succeed even if revocation checking fails
Description: The kSecRevocationRequirePositiveResponse flag was specified but not implemented. This issue was addressed by implementing the flag.
CVE-ID
CVE-2015-5894 : Hannes Oud of kWallet GmbH

Security
Available for: Mac OS X v10.6.8 and later
Impact: A remote server may prompt for a certificate before identifying itself
Description: Secure Transport accepted the CertificateRequest message before the ServerKeyExchange message. This issue was addressed by requiring the ServerKeyExchange first.
CVE-ID
CVE-2015-5887 : Benjamin Beurdouche, Karthikeyan Bhargavan, Antoine Delignat-Lavaud, Alfredo Pironti, and Jean Karim Zinzindohoue of INRIA Paris-Rocquencourt, and Cedric Fournet and Markulf Kohlweiss of Microsoft Research, Pierre-Yves Strub of IMDEA Software Institute

SMB
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue existed in the kernel. This issue was addressed through improved memory handling.
CVE-ID
CVE-2015-5891 : Ilja van Sprundel of IOActive

SMB
Available for: Mac OS X v10.6.8 and later
Impact: A local user may be able to determine kernel memory layout
Description: An issue existed in SMBClient that led to the disclosure of kernel memory content. This issue was addressed through improved bounds checking.
CVE-ID
CVE-2015-5893 : Ilja van Sprundel of IOActive

SQLite
Available for: Mac OS X v10.6.8 and later
Impact: Multiple vulnerabilities in SQLite v3.8.5
Description: Multiple vulnerabilities existed in SQLite v3.8.5. These issues were addressed by updating SQLite to version 3.8.10.2.
CVE-ID
CVE-2015-3414
CVE-2015-3415
CVE-2015-3416

Telephony
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker can place phone calls without the user's knowledge when using Continuity
Description: An issue existed in the authorization checks for placing phone calls. This issue was addressed through improved authorization checks.
CVE-ID
CVE-2015-3785 : Dan Bastone of Gotham Digital Science

Terminal
Available for: Mac OS X v10.6.8 and later
Impact: Maliciously crafted text could mislead the user in Terminal
Description: Terminal did not handle bidirectional override characters in the same way when displaying text and when selecting text. This issue was addressed by suppressing bidirectional override characters in Terminal.
CVE-ID
CVE-2015-5883 : Lukas Schauer (@lukas2511)

tidy
Available for: Mac OS X v10.6.8 and later
Impact: Visiting a maliciously crafted website may lead to arbitrary code execution
Description: Multiple memory corruption issues existed in tidy. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-5522 : Fernando Muñoz of NULLGroup.com
CVE-2015-5523 : Fernando Muñoz of NULLGroup.com

Time Machine
Available for: Mac OS X v10.6.8 and later
Impact: A local attacker may gain access to keychain items
Description: An issue existed in backups by the Time Machine framework. This issue was addressed through improved coverage of Time Machine backups.
CVE-ID
CVE-2015-5854 : Jonas Magazinius of Assured AB

Note: OS X El Capitan v10.11 includes the security content of Safari 9.