Priority HIGH 67
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.
CVSS 2.0HIGH 8.8· Network · No auth · Interaction — · EPSS 0.43195 · Published 2011-07-21 · No fix listed CWE-20
Priority MEDIUM 60
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.21639 · Published 2011-07-21 · No fix listed CWE-119
Priority MEDIUM 56
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.15733 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 55
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execut…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09754 · Published 2011-03-11 · No fix listed CWE-189
Priority MEDIUM 51
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 51
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 51
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-119
Priority MEDIUM 51
Double free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 51
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 51
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08557 · Published 2010-06-11 · Will not fix CWE-119
Priority MEDIUM 51
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 51
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08732 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
An issue was discovered in certain Apple products.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.08884 · Published 2017-07-20 · No fix listed CWE-119
Priority MEDIUM 50
An issue was discovered in certain Apple products.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.095 · Published 2017-07-20 · No fix listed CWE-119
Priority MEDIUM 50
Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and pos…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06924 · Published 2010-11-20 · Fixed CWE-189
Priority MEDIUM 50
Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06728 · Published 2010-07-30 · Fixed CWE-399
Priority MEDIUM 50
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which allows remote attackers to execute arbit…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-119
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to execute arbitrary code or cause a den…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06691 · Published 2010-06-11 · No fix listed CWE-94
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Priority MEDIUM 50
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicat…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06855 · Published 2010-06-11 · Will not fix CWE-119
Priority MEDIUM 50
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06698 · Published 2010-06-11 · Will not fix CWE-399
Load more