Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:49:27 +0000 bdu:2015-02905 https://cve.radiocsirt.org/vuln/bdu:2015-02905 bdu:2015-02905 https://cve.radiocsirt.org/vuln/bdu:2015-02905 certa-2009-avi-223 — De multiples vulnérabilités dans Apple Safari permettant, entre autre, l'exécution de code arbitraire à distance ont ét… https://cve.radiocsirt.org/vuln/certa-2009-avi-223 certa-2009-avi-223 https://cve.radiocsirt.org/vuln/certa-2009-avi-223 EUVD-2026-122656 https://cve.radiocsirt.org/vuln/euvd-2026-122656 EUVD-2026-122656 https://cve.radiocsirt.org/vuln/euvd-2026-122656 fkie_cve-2009-1699 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1699 <p>The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an &#34;XXE attack.&#34;</p> <p>The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an &#34;XXE attack.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-1699 GHSA-q425-6m5x-qp5p https://cve.radiocsirt.org/vuln/ghsa-q425-6m5x-qp5p <p>The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an &#34;XXE attack.&#34;</p> <p>The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an &#34;XXE attack.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-q425-6m5x-qp5p gsd-2009-1699 https://cve.radiocsirt.org/vuln/gsd-2009-1699 gsd-2009-1699 https://cve.radiocsirt.org/vuln/gsd-2009-1699