CVSS: 6.8EPSS: 0%CPEs: 18EXPL: 0CVE-2014-1388
https://notcve.org/view.php?id=CVE-2014-1388
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. WebKit, utilizado en Apple Safari anterior a 6.1.6 y 7.x anterior a 7.0.6, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado, una vulnerabilidad diferente a otros CVEs de WebKit listados en HT6367. • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html http://secunia.com/advisories/60705 http://secunia.com/advisories/61318 http://support.apple.com/kb/HT6367 http://support.apple.com/kb/HT6441 http://support.apple.com/kb/HT6442 http://www.securityfocus.com/bid/69223 http://www.securitytracker.com/id/1030731 https://exchange.xforce.ibmcloud.com/vulnerabilities/95271 https://security.gentoo.org/glsa&# • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 0%CPEs: 18EXPL: 0CVE-2014-1389
https://notcve.org/view.php?id=CVE-2014-1389
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. WebKit, utilizado en Apple Safari anterior a 6.1.6 y 7.x anterior a 7.0.6, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado, una vulnerabilidad diferente a otros CVEs de WebKit listados en HT6367. • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html http://secunia.com/advisories/60705 http://secunia.com/advisories/61318 http://support.apple.com/kb/HT6367 http://support.apple.com/kb/HT6441 http://support.apple.com/kb/HT6442 http://www.securityfocus.com/bid/69223 http://www.securitytracker.com/id/1030731 https://exchange.xforce.ibmcloud.com/vulnerabilities/95272 https://security.gentoo.org/glsa&# • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 0%CPEs: 18EXPL: 0CVE-2014-1387
https://notcve.org/view.php?id=CVE-2014-1387
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367. WebKit, utilizado en Apple Safari anterior a 6.1.6 y 7.x anterior a 7.0.6, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web manipulado, una vulnerabilidad diferente a otros CVEs de WebKit listados en HT6367. • http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html http://secunia.com/advisories/60705 http://secunia.com/advisories/61318 http://support.apple.com/kb/HT6367 http://support.apple.com/kb/HT6441 http://support.apple.com/kb/HT6442 http://www.securityfocus.com/bid/69223 http://www.securitytracker.com/id/1030731 https://exchange.xforce.ibmcloud.com/vulnerabilities/95270 https://security.gentoo.org/glsa&# • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2014-1369
https://notcve.org/view.php?id=CVE-2014-1369
WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site. WebKit en Apple Safari anterior a 6.1.5 y 7.x anterior a 7.0.5 permite a atacantes remotos asistidos por usuario acceder URLs file: mediante el aprovechamiento de una operación de arrastrar que origina en un sitio web manipulado. • http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html http://www.securitytracker.com/id/1030495 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 25EXPL: 0CVE-2014-1345
https://notcve.org/view.php?id=CVE-2014-1345
WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site. WebKit en Apple iOS anterior a 7.1.2 y Apple Safari anterior a 6.1.5 y 7.x anterior a 7.0.5 no codifica debidamente nombres de dominios en URLs, lo que permite a atacantes remotos falsificar la barra de direcciones a través de un sitio web manipulado. • http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html http://secunia.com/advisories/59481 http://www.securityfocus.com/bid/68276 http://www.securitytracker.com/id/1030495 •