CVE List

Id CVE No. Status Description Phase Votes Comments Actions
91969  CVE-2016-5150  Candidate  WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.  Assigned (20160531)  None (candidate not yet proposed)    View
91989  CVE-2016-5170  Candidate  WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.  Assigned (20160531)  None (candidate not yet proposed)    View
44313  CVE-2010-1729  Candidate  WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop.  Assigned (20100505)  None (candidate not yet proposed)    View
83068  CVE-2015-5791  Candidate  WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.  Assigned (20150806)  None (candidate not yet proposed)    View
83070  CVE-2015-5793  Candidate  WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.  Assigned (20150806)  None (candidate not yet proposed)    View

Page 248 of 20943, showing 5 records out of 104715 total, starting on record 1236, ending on 1240

Actions