Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apple webkit vulnerabilities and exploits
(subscribe to this query)
890
VMScore
CVE-2010-1760
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
Apple Webkit
Apple Webkit R56188
Apple Webkit R56379
Apple Webkit R50173
Apple Webkit R56187
890
VMScore
CVE-2010-1386
page/Geolocation.cpp in WebCore in WebKit before r56188 and prior to 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Apple Webkit
Apple Webkit R50173
383
VMScore
CVE-2010-1729
WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote malicious users to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop.
Apple Safari
Apple Webkit
383
VMScore
CVE-2016-4590
WebKit in Apple iOS prior to 9.3.3 and Safari prior to 9.1.2 mishandles about: URLs, which allows remote malicious users to bypass the Same Origin Policy via a crafted web site.
Apple Webkit
Apple Safari
606
VMScore
CVE-2016-4589
WebKit in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE...
Apple Webkit
383
VMScore
CVE-2010-2441
WebKit does not properly restrict focus changes, which allows remote malicious users to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295.
Apple Webkit
383
VMScore
CVE-2016-4585
Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2 allows remote malicious users to inject arbitrary web script or HTML via an HTTP response specifying redirection that is ...
Apple Webkit
383
VMScore
CVE-2016-4587
WebKit in Apple iOS prior to 9.3.3 and tvOS prior to 9.2.2 allows remote malicious users to obtain sensitive information from uninitialized process memory via a crafted web site.
Apple Webkit
605
VMScore
CVE-2016-4588
WebKit in Apple tvOS prior to 9.2.2 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Apple Webkit
694
VMScore
CVE-2016-4591
WebKit in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2 mishandles the location variable, which allows remote malicious users to access the local filesystem via unspecified vectors.
Apple Webkit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228
CVE-2024-20361
log injection
bypass
CVE-2024-4985
CVE-2024-35223
CVE-2024-29849
CVE-2024-31893
IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »