Apple

Safari

1647 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-1003

  • EPSS 1.83%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same docume...

4.3

CVE-2008-1004

  • EPSS 1.83%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.

2.1

CVE-2008-1005

  • EPSS 0.38%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.

4.3

CVE-2008-1006

  • EPSS 1.83%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.

4.3

CVE-2008-1007

  • EPSS 2.8%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

4.3

CVE-2008-1008

  • EPSS 1.83%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.

4.3

CVE-2008-1009

  • EPSS 1.83%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object.

6.8

CVE-2008-1010

  • EPSS 4.61%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:47

Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.

4.3

CVE-2008-1011

  • EPSS 1.88%
  • Veröffentlicht 19.03.2008 00:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:48

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that calls a method instance in another frame.

6.8

CVE-2008-0894

  • EPSS 1.2%
  • Veröffentlicht 21.02.2008 21:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:33

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420.