Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

apple / cfnetwork CVEs

Beta · best-effort

5 CVEs tagged to apple / cfnetwork — 1 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apple vendor archive

CVE-2011-0214

Published Jul 21, 2011

CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-1420

Published Jul 21, 2011

Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-1383

Published Jul 21, 2011

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

CVE-2010-1800

Published Aug 25, 2010

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive in…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-2403

Published Aug 3, 2007

CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitra…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1