Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:07:42 +0000 certa-2009-avi-496 — De multiples vulnérabilités dans Apple Safari permettent entre autres l'exécution de code arbitraire à distance. https://cve.radiocsirt.org/vuln/certa-2009-avi-496 certa-2009-avi-496 https://cve.radiocsirt.org/vuln/certa-2009-avi-496 EUVD-2026-123658 https://cve.radiocsirt.org/vuln/euvd-2026-123658 EUVD-2026-123658 https://cve.radiocsirt.org/vuln/euvd-2026-123658 fkie_cve-2009-2816 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2816 <p>The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.</p> <p>The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-2816 GHSA-2wxv-94xf-vqv2 https://cve.radiocsirt.org/vuln/ghsa-2wxv-94xf-vqv2 <p>The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.</p> <p>The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.</p> https://cve.radiocsirt.org/vuln/ghsa-2wxv-94xf-vqv2 gsd-2009-2816 https://cve.radiocsirt.org/vuln/gsd-2009-2816 gsd-2009-2816 https://cve.radiocsirt.org/vuln/gsd-2009-2816