U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:apple:safari:6.0.1:*:*:*:*:*:*:*
There are 875 matching records.
Displaying matches 861 through 875.
Vuln ID Summary CVSS Severity
CVE-2013-5195

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.

Published: December 18, 2013; 11:04:24 AM -0500 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-5130

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files.

Published: October 24, 2013; 6:53:09 AM -0400 		V3.x:(not available)
 V2.0: 5.0 MEDIUM
CVE-2013-1047

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:56 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1041

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1040

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1039

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1038

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1037

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

Published: September 19, 2013; 6:27:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1023

WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1009.

Published: June 05, 2013; 10:39:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-1013

XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.

Published: June 05, 2013; 10:39:55 AM -0400 		V3.x:(not available)
 V2.0: 4.3 MEDIUM
CVE-2013-1012

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.

Published: June 05, 2013; 10:39:55 AM -0400 		V3.x:(not available)
 V2.0: 4.3 MEDIUM
CVE-2013-1009

WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.

Published: June 05, 2013; 10:39:55 AM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-0961

WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0960.

Published: March 15, 2013; 4:55:10 PM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2013-0960

WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0961.

Published: March 15, 2013; 4:55:10 PM -0400 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2012-3748

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.

Published: November 03, 2012; 1:55:01 PM -0400 		V3.x:(not available)
 V2.0: 5.1 MEDIUM