Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
AppleSafari3.0.1

8 matches found

CVE
CVE•added 2007/06/12 10:30 p.m.•67 views

CVE-2007-3186

Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI.

9.3CVSS7.2AI score0.08926EPSS
CVE
CVE•added 2007/06/25 7:30 p.m.•63 views

CVE-2007-2400

Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to p...

4.3CVSS5.3AI score0.00304EPSS
CVE
CVE•added 2007/06/19 9:30 p.m.•59 views

CVE-2007-3274

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location.

4.3CVSS6AI score0.00388EPSS
CVE
CVE•added 2007/06/21 10:30 a.m.•56 views

CVE-2007-2398

Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phish...

7.1CVSS6.3AI score0.01459EPSS
CVE
CVE•added 2007/08/03 8:17 p.m.•55 views

CVE-2007-2408

WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets via a crafted web page.

6.8CVSS6.3AI score0.00708EPSS
CVE
CVE•added 2007/06/12 10:30 p.m.•47 views

CVE-2007-3185

Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that trigger memory corruption, as demonstrated using Hamachi.

7.8CVSS6.3AI score0.01482EPSS
CVE
CVE•added 2007/06/19 10:30 p.m.•46 views

CVE-2007-3284

corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name.

7.8CVSS6.3AI score0.03548EPSS
CVE
CVE•added 2007/06/14 6:30 p.m.•39 views

CVE-2007-2391

Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page.

4.3CVSS5.2AI score0.00503EPSS