Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

348 matches found

OSV
OSV•added 2017/10/23 1:29 a.m.•14 views

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

6.1CVSS5.9AI score
SaveExploits0References6
Prion
Prion•added 2017/10/23 1:29 a.m.•29 views

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

4.3CVSS5.8AI score0.061EPSS
SaveExploits6References6Affected Software5
Cvelist
Cvelist•added 2017/10/23 1:00 a.m.•34 views

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

5.4AI score0.061EPSS
SaveExploits6References6
CVE
CVE•added 2017/10/23 1:00 a.m.•139 views

CVE-2017-7089

CVE-2017-7089 affects WebKit in iOS before 11, Safari before 11, and iCloud for Windows 7.0; a logic/UXSS issue in parent-tab handling can enable universal cross-site scripting. Root cause: mishandling of the parent-tab flow in WebKit/Safari. Impact: UXSS across visiting sites; potential for arbi...

6.1CVSS5.4AI score0.061EPSS
SaveExploits6References6Affected Software3
Debian CVE
Debian CVE•added 2017/10/23 1:00 a.m.•40 views

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

6.1CVSS6.4AI score0.061EPSS
SaveExploits6
UbuntuCve
UbuntuCve•added 2017/10/18 12:00 a.m.•35 views

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

6.1CVSS6.9AI score0.061EPSS
SaveExploits6References3
seebug.org
seebug.org•added 2017/05/26 12:00 a.m.•43 views

WebKit: UXSS via Editor::Command::execute(CVE-2017-2504)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

4.3CVSS6.7AI score0.03347EPSS
SaveExploits5
seebug.org
seebug.org•added 2017/05/26 12:00 a.m.•28 views

WebKit enqueuePageshowEvent / enqueuePopstateEvent Universal XSS(CVE-2017-2510)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events. He...

4.3CVSS6.6AI score0.03918EPSS
SaveExploits4
Packet Storm
Packet Storm•added 2017/05/25 12:00 a.m.•64 views

WebKit HTMLObjectElement::updateWidget Universal XSS

WebKit: UXSS through HTMLObjectElement::updateWidget CVE-2017-2493 When an object element loads a JavaScript URLe.g., javascript:alert1, it checks whether it violate the Same Origin Policy or not. Here's some snippets of the logic. void HTMLObjectElement::updateWidgetCreatePlugins createPlugins...

7.5AI score0.0148EPSS
SaveExploits2
OSV
OSV•added 2017/05/22 5:29 a.m.•12 views

CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

6.1CVSS5AI score
SaveExploits0References6
NVD
NVD•added 2017/05/22 5:29 a.m.•16 views

CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

6.1CVSS5.1AI score0.01152EPSS
SaveExploits0References6
OSV
OSV•added 2017/05/22 5:29 a.m.•12 views

CVE-2017-2528

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with cached frames...

6.1CVSS5.1AI score
SaveExploits0References6
NVD
NVD•added 2017/05/22 5:29 a.m.•18 views

CVE-2017-2528

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with cached frames...

6.1CVSS5.1AI score0.02025EPSS
SaveExploits4References6
Prion
Prion•added 2017/05/22 5:29 a.m.•22 views

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container nodes...

4.3CVSS5AI score0.03015EPSS
SaveExploits3References6Affected Software2
UbuntuCve
UbuntuCve•added 2017/05/22 5:29 a.m.•28 views

CVE-2017-2528

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with cached frames...

6.1CVSS6.9AI score0.02025EPSS
SaveExploits4References4
Prion
Prion•added 2017/05/22 5:29 a.m.•22 views

Command injection

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

4.3CVSS5.1AI score0.03347EPSS
SaveExploits5References7Affected Software3
NVD
NVD•added 2017/05/22 5:29 a.m.•19 views

CVE-2017-2508

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container nodes...

6.1CVSS5.1AI score0.03015EPSS
SaveExploits3References6
OSV
OSV•added 2017/05/22 5:29 a.m.•12 views

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

6.1CVSS5.1AI score
SaveExploits0References7
UbuntuCve
UbuntuCve•added 2017/05/22 5:29 a.m.•29 views

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

6.1CVSS6.9AI score0.03347EPSS
SaveExploits5References5
UbuntuCve
UbuntuCve•added 2017/05/22 5:29 a.m.•22 views

CVE-2017-2508

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container nodes...

6.1CVSS6.9AI score0.03015EPSS
SaveExploits3References4
Rows per page
Query Builder