https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:14:09.207721+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-567 certa-2011-avi-567 — De nombreuses vulnérabilités ont été corrigées dans Apple iOS pour iPhone, iPad et iPod touch dont certaines permettent… 2026-10-03T07:14:09.304779+00:00 certa-2011-avi-567 https://cve.radiocsirt.org/vuln/euvd-2026-116317 EUVD-2026-116317 2026-10-03T07:14:09.304821+00:00 EUVD-2026-116317 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3426 fkie_cve-2011-3426 2026-10-03T07:14:09.304836+00:00

Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.

 https://cve.radiocsirt.org/vuln/ghsa-fmqw-584g-35fg GHSA-fmqw-584g-35fg 2026-10-03T07:14:09.304866+00:00

Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header.

 https://cve.radiocsirt.org/vuln/gsd-2011-3426 gsd-2011-3426 2026-10-03T07:14:09.304882+00:00 gsd-2011-3426 https://cve.radiocsirt.org/vuln/jvndb-2011-000088 jvndb-2011-000088 2026-10-03T07:14:09.304893+00:00

Safari for iOS provided by Apple contains a cross-site scripting vulnerability. Safari for iOS provided by Apple does not support the "attachment" value for the HTTP Content-Disposition header, resulting in a cross-site scripting vulnerability. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.