Page 14 of 311 results (0.012 seconds)

CVSS: 5.3EPSS: 1%CPEs: 126EXPL: 2

CVE-2010-3804 – WebKit - Insufficient Entropy Random Number Generator

https://notcve.org/view.php?id=CVE-2010-3804

20 Nov 2010 — The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171. La implementación de JavaScript en WebKit en Apple Safari anteriores a v5.0.3 en Mac OS X v10.5 hasta v10.6 y Windows, y anteriores a v4.1.3 en Mac OS X v10.4, usa un a... • https://www.exploit-db.com/exploits/35005 • CWE-310: Cryptographic Issues •

CVSS: 6.5EPSS: 0%CPEs: 126EXPL: 0

CVE-2010-3810

https://notcve.org/view.php?id=CVE-2010-3810

20 Nov 2010 — WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack. WebKit en Apple Safari anteriores a v5.0.3 en Mac OS X v10.5 hasta v10.6 y Windows, y anteirores a v4.1.3 en Mac OS X v10.4, no maneja de forma adecuada el objeto History, lo que permite a atacantes remotos espiar la URL de la barra de l... • http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html •

CVSS: 9.3EPSS: 3%CPEs: 126EXPL: 0

CVE-2010-3803

https://notcve.org/view.php?id=CVE-2010-3803

20 Nov 2010 — Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string. Desbordamiento de entero en WebKit en Apple Safari anterior a v5.0.3 sobre Mac OS X v10.5 hasta v10.6 y Windows, y anterior a v4.1.3 sobre Mac OS X v10.4, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caíd... • http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 1%CPEs: 126EXPL: 0

CVE-2010-3826

https://notcve.org/view.php?id=CVE-2010-3826

20 Nov 2010 — WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of colors in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. WebKit en Apple Safari anterior a v5.0.3 en Mac OS X v10.5 hasta v10.6 y Windows, y anterior a v4.1.3 en Mac OS X v10.4, no realiza adecuadamente una conversión ... • http://lists.apple.com/archives/security-announce/2010//Nov/msg00002.html •

CVSS: 5.3EPSS: 0%CPEs: 12EXPL: 0

CVE-2010-3796

https://notcve.org/view.php?id=CVE-2010-3796

16 Nov 2010 — Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications. Safari RSS en Apple Mac OS X v10.5.8 y v10.6.x anterior v10.6.5 no bloquea las applets de Java en los feed RSS, lo que permite a atacantes remotos obtener información sensible a través del feedo: URL contiene un applet que realiza modificaciones DOM. • http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0

CVE-2010-1844

https://notcve.org/view.php?id=CVE-2010-1844

16 Nov 2010 — Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a crafted image. Vulnerabilidad no específica en Image Capture en Apple Mac OS X v10.6.x anteriores a v10.6.5 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y caída del sistema) a través de una imagen manipulada. • http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html • CWE-20: Improper Input Validation •

CVSS: 8.8EPSS: 1%CPEs: 12EXPL: 0

CVE-2010-1845

https://notcve.org/view.php?id=CVE-2010-1845

16 Nov 2010 — ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD image. ImageIO en Apple Mac OS X v10.5.8 y v10.6.x anterior v10.6.5 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (corrupción de memoria y caída de aplicación) a través de una imagen PSD manipulada. • http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 2%CPEs: 10EXPL: 0

CVE-2010-3786

https://notcve.org/view.php?id=CVE-2010-3786

16 Nov 2010 — QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Excel file. QuickLook en Apple Mac OS X v10.6.x anterior a v10.6.5 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servivio (corrupción de memoria y caída de la aplicación) a través de un archivo Excel manipulado. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=881 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2010-1846

https://notcve.org/view.php?id=CVE-2010-1846

16 Nov 2010 — Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RAW image. Desbordamiento de búfer basado en memoria dinámica en Image RAW en Apple Mac OS X v10.5.8 y v10.6.x anterior a v10.6.5 que permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (caída de la aplicación) a través de una imagen RAW manipulada. • http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.4EPSS: 0%CPEs: 6EXPL: 0

CVE-2010-3797

https://notcve.org/view.php?id=CVE-2010-3797

16 Nov 2010 — Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Apple Mac OS X v10.5.8 y v10.6.x anterior a v10.6.5 permite a usuarios autenticados remotamente inyectar secuencias de comandos web o HTML a través de vectores sin especificar. • http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •