Search Results (Refine Search)
- CPE Product Version: cpe:/a:apple:safari:1.0:beta2
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2009-0162 |
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL. Published: May 13, 2009; 11:30:00 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2008-4216 |
The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that "launch local files." Published: November 17, 2008; 1:18:47 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2008-3644 |
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache. Published: November 17, 2008; 1:18:47 PM -0500 |
V3.x:(not available) V2.0: 1.9 LOW |
CVE-2008-3623 |
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces. Published: November 17, 2008; 1:18:47 PM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
CVE-2003-0370 |
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack. Published: June 16, 2003; 12:00:00 AM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |