Skip to content
OpenAdvisories

Archive

10 June 2009

Vulnerabilities first published on this day (UTC), newest first.

66 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted rem…

  • Unscored —

    CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueTyp…

  • Unscored —

    Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 a…

  • Unscored —

    Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote at…

  • Unscored —

    WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attacke…

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —

    WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) secu…

  • Unscored —

    The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch…

  • Unscored —

    CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, wh…

  • Unscored —

    WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted rem…

  • Unscored —

    The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie st…

  • Unscored —

    Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read…

  • Unscored —
    CVE-2009-1535 Public exploit EPSS 98%

    The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI…

  • Unscored —
    CVE-2009-1684 Public exploit

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone …

  • Unscored —

    Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for …

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows r…

  • Unscored —

    The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for i…

  • Unscored —

    Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easie…

  • Unscored —

    WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not…