Searching safari software vulnerabilities

Safari 1.0 Beta 2 (v73) and earlier does not va

Safari | Beta |

Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates.


Apple Safari allows remote attackers to bypass

restrictions | application | attackers | intended | "%2e%2e" | access | allows | Safari | bypass | remote | cookie | Apple | via | web |

Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.


Unknown vulnerability in Safari web browser in

vulnerability | browser | Unknown | Safari | Mac | web |

Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.


Unknown vulnerability in Safari web browser for

vulnerability | browser | Unknown | Safari | Mac | web |

Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."


The Javascript engine in Safari 1.2 and earlier

Javascript | attackers | earlier | service | denial | remote | Safari | engine | allows | cause |

The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array.


Argument injection vulnerability in the SSH URI

vulnerability | injection | Argument | handler | Safari | Mac | SSH | URI |

Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.


The "Show in Finder" button in the Safari web b

Finder" | browser | Safari | button | "Show | Mac | web |

The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code.


Safari 1.2.2 does not properly prevent a frame

Safari |

Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.


Apple Safari 1.0 through 1.2.3 allows remote at

through | Safari | Apple |

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.


Apple Safari 1.2.4 does not obey the Content-ty

Safari | Apple |

Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.


Safari 1.3 allows remote attackers to cause a d

attackers | service | denial | Safari | allows | remote | cause |

Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.


Dashboard in Apple Mac OS X 10.4.1 allows remot

Dashboard | Apple | Mac |

Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.


Safari in Mac OS X 10.3.9 and 10.4.2 submits fo

Safari | Mac |

Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.


Safari in WebKit in Mac OS X 10.4 to 10.4.2 dir

WebKit | Safari | Mac |

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.


Safari after 2.0 in Apple Mac OS X 10.3.9 allow

Safari | Apple | after | Mac |

Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site.


Apple Safari allows remote attackers to cause a

attackers | service | denial | remote | Safari | allows | Apple | cause |

Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.


Apple Safari 2.0.2 allows remote attackers to c

Safari | Apple |

Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.


Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6

Safari | Apple |

Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop. NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself.


Apple Safari allows remote attackers to cause a

attackers | service | denial | remote | Safari | allows | Apple | cause |

Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.


Cross-site scripting (XSS) vulnerability in Saf

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML via frame tags.


Software vulnerabilities results 1 to 20 of 89     
Page: 12345►