CVE List

Id CVE No. Status Description Phase Votes Comments Actions
49369  CVE-2011-1457  Candidate  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.  Assigned (20110318)  None (candidate not yet proposed)    View
49374  CVE-2011-1462  Candidate  WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.  Assigned (20110318)  None (candidate not yet proposed)    View
48075  CVE-2011-0163  Candidate  WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.  Assigned (20101223)  None (candidate not yet proposed)    View
48073  CVE-2011-0161  Candidate  WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.  Assigned (20101223)  None (candidate not yet proposed)    View
48072  CVE-2011-0160  Candidate  WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.  Assigned (20101223)  None (candidate not yet proposed)    View

Page 284 of 20943, showing 5 records out of 104715 total, starting on record 1416, ending on 1420

Actions