Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Cfnetwork
(Apple)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 5 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2011-07-21 | CVE-2011-0214 | CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority. | Cfnetwork, Safari | N/A | ||
| 2010-08-25 | CVE-2010-1800 | CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses. | Cfnetwork, Mac_os_x, Mac_os_x_server | N/A | ||
| 2011-07-21 | CVE-2010-1420 | Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file. | Cfnetwork, Safari | N/A | ||
| 2011-07-21 | CVE-2010-1383 | CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue. | Cfnetwork, Safari | N/A | ||
| 2007-08-03 | CVE-2007-2403 | CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers. | Cfnetwork | N/A |