Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple safari 1.0.0b2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0162
Cross-site scripting (XSS) vulnerability in Safari prior to 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 prior to 10.5.7 and Windows allows remote malicious users to inject arbitrary web script or HTML via a crafted feed: URL.
Apple Safari 1.0Apple Safari 1.0.0b1Apple Safari 1.2Apple Safari 1.0.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 2Apple Safari 2.0.3Apple Safari 3.0Apple Safari 3.0.0Apple Safari 3.1.1Apple Safari 3.1.2Apple Safari 1.0.1Apple Safari 1.0.0b2Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 2.0.4Apple Safari 3Apple Safari 3.1.0Apple Safari 3.1
NA
CVE-2009-0945
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari prior to 3.2.3 and 4 Public Beta, iPhone OS 1.0 up to and including 2.2.1, iPhone OS for iPod touch 1.1 up to and including 2.2.1, Google Chrome Stable prior to 1.0.154.65, and possibly other prod...
Apple Safari 0.9Apple Safari 1.0.2Apple Safari 1.1.0Apple Safari 1.1Apple Safari 0.8Apple Safari 1.0.3Apple Safari 1.0.0Apple Safari 1.2.0Apple Safari 1.1.1Apple Safari 1.3.0Apple Safari 1.3.2Apple Safari 1.3Apple Safari 2.0.3Apple Safari 3.0.1Apple Safari 3.0.2Apple Safari 3.2Apple Safari 3.2.0Apple Safari 1.0Apple Safari 1.0.0b1Apple Safari 1.2Apple Safari 1.2.4Apple Safari 1.2.5
NA
CVE-2009-2842
Apple Safari prior to 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote malicious users to read local HTML files via a crafted web site.
Apple Safari 3.2.1Apple Safari 3.2.0Apple Safari 3.0.4Apple Safari 3.0.3bApple Safari 3.0.0Apple Safari 3.0Apple Safari 2.0.2Apple Safari 2.0.1Apple Safari 1.3Apple Safari 1.2.5Apple Safari 1.1.0Apple Safari 1.1Apple Safari 1.0.0b1Apple Safari 1.0.0Apple Safari 4.0.0bApple SafariApple Safari 3.2Apple Safari 3.1.2Apple Safari 3.0.3Apple Safari 3.0.2bApple Safari 2.0.4Apple Safari 2.0.3
NA
CVE-2011-0216
Off-by-one error in libxml in Apple Safari prior to 5.0.6 allows remote malicious users to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
Apple Safari 2.0.1Apple Safari 1.2.2Apple Safari 2.0.2Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0.0Apple Safari 2.0.3Apple Safari 2.0.4Apple Safari 2.0Apple Safari 1.1Apple Safari 3.2.1Apple Safari 3.1.0Apple Safari 3.0.4bApple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.5Apple Safari 1.3Apple Safari 3.0Apple Safari 3.0.3Apple Safari 5.0Apple Safari 1.3.2
NA
CVE-2011-0217
Apple Safari prior to 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote malicious users to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.
Apple Safari 1.3.1Apple Safari 1.2.2Apple Safari 1.3.2Apple Safari 1.1.1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 5.0.1Apple Safari 2.0.4Apple Safari 3.0.3bApple Safari 2Apple Safari 3.1.1Apple Safari 3.0.1bApple Safari 3.1.0bApple Safari 3.1.0Apple Safari 3.1.2Apple Safari 5.0.4Apple Safari 2.0.1Apple Safari 2.0.3Apple Safari 1.3.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0
NA
CVE-2011-0166
The HTML5 drag and drop functionality in WebKit in Apple Safari prior to 5.0.4 allows user-assisted remote malicious users to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778.
Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 1.2.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 4.1.2Apple Safari 1.0.0Apple Safari 3Apple Safari 2.0.4Apple Safari 3.0.2Apple Safari 3.0.4bApple Safari 3.0.1bApple Safari 3.1.0bApple Safari 2.0.0Apple Safari 2Apple Safari 1.2.5Apple Safari 2.0.2Apple Safari 1.0Apple Safari 5.0.1Apple Safari 3.0.1Apple Safari 3.0.0bApple Safari 3.0.2b
NA
CVE-2011-0167
The windows functionality in WebKit in Apple Safari prior to 5.0.4 allows remote malicious users to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Apple Safari 2.0Apple Safari 2.0.1Apple Safari 2.0.3Apple Safari 1.2.3Apple Safari 1.3.1Apple Safari 1.2.1Apple Safari 1.2Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 3.0Apple WebkitApple Safari 3.0.3Apple Safari 3.1.2Apple Safari 3.2.0Apple Safari 1.1Apple Safari 4.1Apple Safari 1.3.2Apple Safari 2.0.2Apple Safari 1.0.3Apple Safari 4.1.2Apple Safari 1.0.0Apple Safari 3.0.0b
NA
CVE-2011-0169
WebKit in Apple Safari prior to 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote malicious users to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks ...
Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 1.3.0Apple Safari 1.2.0Apple Safari 1.1.1Apple Safari 1.0.2Apple Safari 1.1.0Apple Safari 1.0.0Apple Safari 1.0.1Apple Safari 1.3Apple Safari 2.0.4Apple Safari 5.0Apple Safari 3.0.4bApple Safari 3.1.0Apple Safari 2.0.0Apple Safari 3.2.1Apple Safari 2Apple Safari 2.0.2Apple Safari 1.0.3Apple Safari 5.0.1Apple Safari 4.1.2Apple Safari 3.0.0b
NA
CVE-2009-2062
Apple Safari prior to 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an...
Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.3.2Apple Safari 2Apple Safari 2.0.3Apple Safari 3.0.0Apple Safari 3.0.0bApple Safari 3.0.3Apple Safari 3.0.3bApple Safari 3.1.1Apple Safari 3.1.2Apple Safari 0.8Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.3.0Apple Safari 1.3.1
NA
CVE-2009-2066
Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a s...
Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.1.0Apple Safari 1.1Apple Safari 1.2.5Apple Safari 1.3Apple Safari 2.0Apple Safari 2.0.0Apple Safari 2.0.3Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 0.9Apple Safari 1.0.3Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.3.2Apple Safari 3Apple Safari 3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook