Search vulnerabilities

Results 923

Export CSV
CVE-2012-3606

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

CVSS 2.0 · 9.3 Critical EPSS 3.4% KEV · Not listed
Vendors
Products
CVE-2012-3602

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

CVSS 2.0 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2011-2825

Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts.

CVSS 2.0 · 9.3 Critical EPSS 2.3% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2012-3601

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

CVSS 2.0 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2012-3598

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2011-2823

Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-0140

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

CVSS 2.0 · 7.6 High EPSS 2.6% KEV · Not listed
Vendors
Products
Itunes Webkit Windows and 3 more
CVE-2012-1521

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2012-0677

Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.

CVSS 2.0 · 9.3 Critical EPSS 15.6% KEV · Not listed
Vendors
Products
CVE-2011-2820

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

CVSS 2.0 · 7.6 High EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2012-0648

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2012-0639

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2011-2818

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to display box rendering.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-0139

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

CVSS 2.0 · 7.6 High EPSS 2.3% KEV · Not listed
Vendors
Products
Itunes Webkit Windows and 3 more
CVE-2012-0638

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2012-0637

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2011-2817

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

CVSS 2.0 · 7.6 High EPSS 2.3% KEV · Not listed
Vendors
Products
CVE-2012-0636

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

CVSS 2.0 · 7.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2012-0635

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
Products
CVE-2011-2816

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

CVSS 2.0 · 7.6 High EPSS 2.3% KEV · Not listed
Vendors
Products