Vulnerabilities > Apple > Safari > Low

DATE CVE VULNERABILITY TITLE RISK
2008-11-17 CVE-2008-3644 Information Exposure vulnerability in Apple Safari
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.
local
apple CWE-200
1.9
2008-03-19 CVE-2008-1005 Information Exposure vulnerability in Apple Safari
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
local
low complexity
apple CWE-200
2.1
2007-05-09 CVE-2007-2580 Local vulnerability in Apple Safari
Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.
local
apple
1.9
2005-08-19 CVE-2005-2517 Unspecified vulnerability in Apple mac OS X and Safari
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.
network
high complexity
apple
2.6
2005-07-13 CVE-2005-2272 Unspecified vulnerability in Apple Safari 2.0
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
network
high complexity
apple
2.6
2005-05-03 CVE-2005-1385 Denial-Of-Service vulnerability in Apple Safari 1.3
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
network
high complexity
apple
2.6