Apple / Cfnetwork
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2011-0214 | CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers… | MEDIUM | 5.0 | Jul 21, 2011 |
| CVE-2010-1420 | Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted… | MEDIUM | 4.3 | Jul 21, 2011 |
| CVE-2010-1383 | CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, relat… | HIGH | 9.3 | Jul 21, 2011 |
| CVE-2010-1800 | CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and… | MEDIUM | 5.0 | Aug 25, 2010 |
| CVE-2007-2403 | CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP… | MEDIUM | 6.8 | Aug 3, 2007 |
Showing 1 to 5 of 5 CVEs