The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin.
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to 10.7.4 (inclusive)
cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* versions up to 10.7.4 (inclusive)
|6583||Mac OS X 10.7 < 10.7.5 Multiple Vulnerabilities||Nessus Network Monitor||Generic|
|62214||Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)||Nessus||MacOS X Local Security Checks|
|62213||Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)||Nessus||MacOS X Local Security Checks|