VendorsApplesafari5.1.4
Vulnerabilities

Apple Safari 5.1.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

83CVEs
CVE-2012-0678
Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL.
Published 2012-07-25 · Modified
4.3EPSS 0.009
CVE-2012-3690
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.
Published 2012-07-25 · Modified
4.3EPSS 0.009
CVE-2012-3694
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.
Published 2012-07-25 · Modified
4.3EPSS 0.009
← Prev3 / 3