Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple apple support vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-3693
Incomplete blacklist vulnerability in WebKit in Apple Safari prior to 6.0 allows remote malicious users to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.
Apple Safari 3.2.0bApple Safari 3.1.2bApple Safari 1.1.1Apple Safari 4.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 3.0.1Apple Safari 3.1.1bApple Safari 4.0.0bApple Safari 4.0Apple Safari 2.0.3Apple Safari 2.0.4Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.0Apple Safari 5.1.1Apple Safari 4.0.3Apple Safari 3.2.1Apple Safari 3.2.2b
NA
CVE-2009-1701
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to execute arbitrary code or cause a denial ...
Apple Safari 3.0.4bApple Safari 2.0.3Apple Safari 3.0.4Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 3.0.0Apple Safari 3.1.0Apple Safari 3.2.0Apple Safari 3.1.2Apple Safari 3.0.3Apple Safari 3.0.2bApple Safari 2.0.4Apple Safari 2.0.0Apple Safari 2.0Apple Safari 3.0.3bApple Safari 3.0.0bApple Safari 3.1.1Apple Safari 3.1.0bApple Safari 3.0.2Apple Safari 3.0.1bApple Safari
NA
CVE-2007-2396
The JDirect support in QuickTime for Java in Apple Quicktime prior to 7.2 exposes certain dangerous interfaces, which allows remote malicious users to execute arbitrary code via crafted Java applets.
Apple Quicktime 7.1Apple Quicktime 7.1.1Apple Quicktime 7.0.2Apple Quicktime 7.0.3Apple Quicktime 7.1.5Apple Quicktime 7.0.4Apple Quicktime -Apple Quicktime 7.0Apple Quicktime 7.0.1Apple Quicktime 7.1.2Apple Quicktime 7.1.3Apple Quicktime 7.1.4
NA
CVE-2010-3831
Photos in Apple iOS prior to 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle malicious users to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.
Apple Iphone Os 4.0Apple Iphone Os 3.2.2Apple Iphone Os 3.2.1Apple Iphone Os 2.2.1Apple Iphone Os 2.2Apple Iphone Os 1.1.4Apple Iphone Os 1.1.3Apple Iphone Os 3.2Apple Iphone Os 3.1.3Apple Iphone Os 2.1.1Apple Iphone Os 2.1Apple Iphone Os 1.1.2Apple Iphone Os 1.1.1Apple Iphone Os 2.0Apple Iphone OsApple Iphone Os 3.1.2Apple Iphone Os 3.1Apple Iphone Os 2.0.2Apple Iphone Os 2.0.1Apple Iphone Os 1.1.0Apple Iphone Os 1.0.2Apple Iphone Os 4.0.2
NA
CVE-2007-6166
Stack-based buffer overflow in Apple QuickTime prior to 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header.
Apple Quicktime 7.0.1Apple Quicktime 6.5.1Apple Quicktime 5.0Apple Quicktime 6.0Apple Quicktime 7.1.4Apple Quicktime 3.0Apple Quicktime 7.0.4Apple Quicktime 7.1.1Apple Quicktime 7.0.3Apple Quicktime 7.1.2Apple QuicktimeApple Quicktime 4.1.2Apple Quicktime 7.0.2Apple Quicktime -Apple Quicktime 5.0.1Apple Quicktime 6.5Apple Quicktime 7.1.3Apple Quicktime 7.1.6Apple Quicktime 7.0Apple Quicktime 6.5.2Apple Quicktime 6.1Apple Quicktime 5.0.2
NA
CVE-2011-3431
The Home screen component in Apple iOS prior to 5 does not properly support a certain application-switching gesture, which might allow physically proximate malicious users to obtain sensitive state information by watching the device's screen.
Apple Iphone Os 4.3.0Apple Iphone Os 4.2.8Apple Iphone Os 4.0.1Apple Iphone Os 3.2.1Apple Iphone Os 3.1Apple Iphone Os 4.3.5Apple Iphone Os 4.3.2Apple Iphone Os 4.3.1Apple Iphone Os 4.0Apple Iphone Os 4.0.2Apple Iphone Os 3.2.2Apple Iphone Os 4.3.3Apple Iphone Os 4.1Apple Iphone Os 3.2Apple Iphone Os 3.0Apple Iphone Os 4.2.5Apple Iphone Os 4.2.1Apple Iphone Os 3.1.3Apple Iphone Os 3.1.2
NA
CVE-2009-2794
The Exchange Support component in Apple iPhone OS prior to 3.1, and iPhone OS prior to 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows local users to bypass intended Microsoft Exchange restrictions by choo...
Apple Iphone Os 2.2.1Apple Iphone Os 2.0.1Apple Iphone Os 3.0Apple Iphone Os 3.0.1Apple Iphone Os 2.0.2Apple Iphone Os 2.1Apple Iphone Os 2.0.0Apple Iphone Os 2.2Apple Iphone Os 2.0Apple Iphone Os 2.1.1
NA
CVE-2010-1783
WebKit in Apple Safari prior to 5.0.1 on Mac OS X 10.5 up to and including 10.6 and Windows, and prior to 4.1.1 on Mac OS X 10.4; and webkitgtk prior to 1.2.6; does not properly handle dynamic modification of a text node, which allows remote malicious users to execute arbitrary c...
Apple Safari 4.0.4Apple Safari 4.0.3Apple Safari 4.0.1Apple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.2Apple SafariApple Safari 4.0.5Apple Webkit
NA
CVE-2013-5181
The auto-configuration feature in Mail in Apple Mac OS X prior to 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows remote malicious users to obtain sensitive information by sniffing the network.
Apple Mac Os X 10.8.0Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.8.4Apple Mac Os X 10.8.5Apple Mac Os X 10.8.1Apple Mac Os X
NA
CVE-2013-5167
CFNetwork in Apple Mac OS X prior to 10.9 does not properly support Safari's deletion of session cookies in response to a reset operation, which makes it easier for remote web servers to track users via Set-Cookie HTTP headers.
Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.8.4Apple Mac Os XApple Mac Os X 10.8.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook