|
3511
|
-
5.0
|
MEDIUM
|
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attacker…
|
NVD-CWE-Other
|
CVE-2009-0961
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3512
|
-
4.3
|
MEDIUM
|
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote at…
|
NVD-CWE-Other
|
CVE-2009-0960
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3513
|
-
7.1
|
HIGH
|
The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 vid…
|
CWE-20
Improper Input Validation
|
CVE-2009-0959
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3514
|
-
4.3
|
MEDIUM
|
Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to …
|
CWE-200
Information Exposure
|
CVE-2009-0958
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-20
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3515
|
-
4.3
|
MEDIUM
|
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary …
|
CWE-79
Cross-site Scripting
|
CVE-2009-1702
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:apple:iphone_os:2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3516
|
-
9.3
|
HIGH
|
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attac…
|
CWE-399
Resource Management Errors
|
CVE-2009-1701
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:apple:iphone_os:2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3517
|
-
4.3
|
MEDIUM
|
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attac…
|
CWE-200
Information Exposure
|
CVE-2009-1700
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:apple:iphone_os:2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3518
|
7.5
7.1
|
HIGH
Network
|
The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, whi…
|
CWE-611
XXE
|
CVE-2009-1699
|
cpe:2.3:o:apple:iphone_os:*:*
|
1.0.0
|
2.2.1
|
|
|
2026-04-23 09:35
2009-06-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3519
|
-
9.3
|
HIGH
|
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr fun…
|
CWE-94
Code Injection
|
CVE-2009-1698
|
cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2:* cpe:2.3:o:apple:iphone_os:2.2.1:* cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3520
|
-
9.3
|
HIGH
|
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other produ…
|
CWE-399
Resource Management Errors
|
CVE-2009-1690
|
cpe:2.3:o:apple:iphone_os:2.2:- cpe:2.3:o:apple:iphone_os:2.2:- cpe:2.3:o:apple:iphone_os:2.2.1:- cpe:2.3:o:ap…
|
|
|
|
|
2026-04-23 09:35
2009-06-10
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|