Cfnetwork

cfnetwork

Vendor: Apple • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-0214 1Apple 2Cfnetwork Safari Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed...Show more CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority.Show less
CVE-2010-1420 1Apple 2Cfnetwork Safari Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file.
CVE-2010-1383 1Apple 2Cfnetwork Safari Apr 29, 2026 Jul 21, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.
CVE-2010-1800 1Apple 3Cfnetwork Mac Os XMac Os X Server Apr 29, 2026 Aug 25, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.
CVE-2007-2403 1Apple 1Cfnetwork Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.