Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1714
HistoryJun 10, 2009 - 6:00 p.m.

CVE-2009-1714

2009-06-1018:00:00
CWE-79
[email protected]
web.nvd.nist.gov
35
cve-2009-1714
cross-site scripting
xss
webkit
apple safari
remote code execution

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.

Affected configurations

NVD
Node
applesafariRange≤4.0_beta-mac
OR
applesafariMatch0.8-mac
OR
applesafariMatch0.9-mac
OR
applesafariMatch1.0-mac
OR
applesafariMatch1.0.3-mac
OR
applesafariMatch1.1-mac
OR
applesafariMatch1.2-mac
OR
applesafariMatch1.3-mac
OR
applesafariMatch1.3.1-mac
OR
applesafariMatch1.3.2-mac
OR
applesafariMatch2.0-mac
OR
applesafariMatch2.0.2-mac
OR
applesafariMatch2.0.4-mac
OR
applesafariMatch3.0-mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3-mac
OR
applesafariMatch3.0.4-mac
OR
applesafariMatch3.1-mac
OR
applesafariMatch3.1.1-mac
OR
applesafariMatch3.1.2-mac
OR
applesafariMatch3.2.1-mac
OR
applesafariMatch3.2.3-mac
Node
applesafariRange≤3.2.3-windows
OR
applesafariMatch3.0-windows
OR
applesafariMatch3.0.1-windows
OR
applesafariMatch3.0.2-windows
OR
applesafariMatch3.0.3-windows
OR
applesafariMatch3.0.4-windows
OR
applesafariMatch3.1-windows
OR
applesafariMatch3.1.1-windows
OR
applesafariMatch3.1.2-windows
OR
applesafariMatch3.2-windows
OR
applesafariMatch3.2.1-windows
OR
applesafariMatch3.2.2-windows

Related

ubuntucve 1
debiancve 1
cvelist 1
nvd 1
prion 1
nessus 5
osv 1
debian 1
openvas 3
seebug 1
ubuntucve
ubuntucve
CVE-2009-1714
2009-06-10 00:00:00
debiancve
debiancve
CVE-2009-1714
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1714
2009-06-10 17:37:00
nvd
nvd
CVE-2009-1714
2009-06-10 18:00:00
prion
prion
Cross site scripting
2009-06-10 18:00:00
nessus
nessus
Debian DSA-1950-1 : webkit - several vulnerabilities
2010-02-24 00:00:00
Mac OS X : Apple Safari < 4.0
2009-06-09 00:00:00
Safari < 4.0 Multiple Vulnerabilities
2009-06-09 00:00:00
osv
osv
webkit - several vulnerabilities
2009-12-12 00:00:00
debian
debian
[SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities
2009-12-12 10:10:15
openvas
openvas
Debian: Security Advisory (DSA-1950-1)
2023-03-08 00:00:00
Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows
2009-06-16 00:00:00
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
2009-06-16 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON
Related for CVE-2009-1714
ubuntucve1debiancve1cvelist1nvd1prion1nessus5osv1debian1openvas3seebug1