mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sun Oct 11 12:21:10 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
ab037ff433
commit
5efd89da02
374 files changed
+5747
-18
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2001-0047](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0047)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23,
|
||||
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/262
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1407
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A935
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows
|
||||
|
||||
#### Reference
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-043
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1405
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -12,6 +12,7 @@ Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Window
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=112915118302012&w=2
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2005-4552](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4552)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1409
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft
|
||||
|
||||
#### Reference
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1401
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0046](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0046)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing / (forward slashes), which might produce inefficient regular expressions.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://adzapper.sourceforge.net/cvslog.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbit
|
||||
#### Reference
|
||||
- http://securityreason.com/securityalert/398
|
||||
- http://www.heise.de/newsticker/meldung/68981
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402
|
||||
- https://www.exploit-db.com/exploits/3422
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -13,6 +13,7 @@ Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 D
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14052
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -16,6 +16,7 @@ Unspecified vulnerability in the Java Runtime Environment component in Oracle Ja
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
|
||||
- http://www.vupen.com/english/advisories/2010/1107
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14061
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote
|
||||
|
||||
#### Reference
|
||||
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14094
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assi
|
||||
|
||||
#### Reference
|
||||
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14069
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.2
|
||||
|
||||
#### Reference
|
||||
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14079
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Goo
|
||||
|
||||
#### Reference
|
||||
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14002
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL
|
||||
|
||||
#### Reference
|
||||
- http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14097
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -14,6 +14,7 @@ Unspecified vulnerability in the Sound component in Oracle Java SE and Java for
|
||||
- http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14092
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozill
|
||||
- http://www.ubuntu.com/usn/usn-930-2
|
||||
- http://www.vupen.com/english/advisories/2010/1557
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=534666
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14017
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
- http://www.vupen.com/english/advisories/2010/3045
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-1232](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1232)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14000
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-1233](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1233)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14023
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r
|
||||
|
||||
#### Reference
|
||||
- http://flock.com/security/
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14067
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-1423](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1423)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14090
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-1824](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1824)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attac
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0470.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14072
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allow
|
||||
|
||||
#### Reference
|
||||
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=90cfcecc09febb8d6c8c1d37ea7bb7cf0f4b00f3#patch20
|
||||
- http://support.apple.com/kb/HT4566
|
||||
- http://www.vupen.com/english/advisories/2010/3045
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-2803](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2803)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before 2.6.35.4 allows local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux k
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0771.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the I
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1041-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, when debugfs is enabl
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1041-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ The compat_alloc_user_space functions in include/asm/compat.h files in the Linux
|
||||
|
||||
#### Reference
|
||||
- http://sota.gen.nz/compat1/
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Buffer overflow in the niu_get_ethtool_tcam_all function in drivers/net/niu.c in
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the
|
||||
|
||||
#### Reference
|
||||
- http://sota.gen.nz/compat2/
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1041-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ The sctp_packet_config function in net/sctp/output.c in the Linux kernel before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0004.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
|
||||
|
||||
@@ -11,6 +11,7 @@ Integer signedness error in the pkt_find_dev_from_minor function in drivers/bloc
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15150/
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Multiple integer overflows in the snd_ctl_new function in sound/core/control.c i
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0004.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-3698](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3698)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel befo
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Socke
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2010-0842.html
|
||||
- http://www.ubuntu.com/usn/USN-1000-1
|
||||
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
|
||||
- https://www.exploit-db.com/exploits/44677/
|
||||
|
||||
@@ -10,7 +10,7 @@ libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
- https://github.com/akaganeite/CVE4PP
|
||||
|
||||
@@ -14,6 +14,7 @@ Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java S
|
||||
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0281.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0880.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14045
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java S
|
||||
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
|
||||
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0880.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14039
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java S
|
||||
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
|
||||
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2011-0281.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14076
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4494](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4494)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=615657
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14018
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=622015
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14013
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
### [CVE-2011-0069](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
@@ -10,8 +10,8 @@ Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14065
|
||||
|
||||
#### Github
|
||||
- https://github.com/mergebase/usn2json
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x bef
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=624764
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14058
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
### [CVE-2011-0072](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0072)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
@@ -10,8 +10,8 @@ Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14038
|
||||
|
||||
#### Github
|
||||
- https://github.com/mergebase/usn2json
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=630919
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14020
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=635977
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14086
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0111](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0111)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0112](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0112)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0113](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0113)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0114](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0114)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0115](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0115)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0116](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0116)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to DOM manipulations during iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0117](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0117)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0118](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0118)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0119](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0119)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0120](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0120)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0121)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0122](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0122)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0123](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0123)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0124](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0124)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0125](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0125)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0126](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0126)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0127](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0127)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0128](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0128)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0129](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0129)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0130](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0130)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0131](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0131)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0132](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0132)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0133](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0133)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0134](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0134)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0135](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0135)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0136](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0136)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0137](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0137)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0138](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0138)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0139](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0139)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0140](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0140)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0141](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0141)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0142](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0142)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0143)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0144](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0144)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0145](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0145)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0146](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0146)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0147](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0147)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0148](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0148)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0149](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0149)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0150](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0150)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0151](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0151)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0152](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0152)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0153)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0154](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0154)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0155](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0155)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0156)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0160](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0160)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0161](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0161)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0163](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0163)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-0165](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0165)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://support.apple.com/kb/HT4566
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
Loaded 100 of 374 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user