Vulnerabilities > Apple > Safari > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-11-17 | CVE-2008-3644 | Information Exposure vulnerability in Apple Safari Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache. | 1.9 |
2008-03-19 | CVE-2008-1005 | Information Exposure vulnerability in Apple Safari WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password. | 2.1 |
2007-05-09 | CVE-2007-2580 | Local vulnerability in Apple Safari Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script. local apple | 1.9 |
2005-08-19 | CVE-2005-2517 | Unspecified vulnerability in Apple mac OS X and Safari Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site. | 2.6 |
2005-07-13 | CVE-2005-2272 | Unspecified vulnerability in Apple Safari 2.0 Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." | 2.6 |
2005-05-03 | CVE-2005-1385 | Denial-Of-Service vulnerability in Apple Safari 1.3 Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference. | 2.6 |