VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CritiqueÉlevéeMoyenneFaibleExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

appleoracleibmgoogleadobemicrosoftmozillaciscoapacheredhatjenkinshpAll vendors →

apple products

safari 1631itunes 922icloud 449quicktime 235xcode 100cups 54apple tv 33darwin streaming server 27quicktime streaming server 16mac os x 13swiftnio 11garageband 9music 8webkit 8

405 090 vulnerabilities · 1 769 actively exploited (CISA KEV)

apple ✕Clear filters

2 628 results

ID	Severity	Summary	Published
CVE-2010-1795	CRITIQUE9.3	Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.	20/08/2010
CVE-2010-1768	MOYENNE6.9	Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.	20/08/2010
CVE-2010-1760	CRITIQUE10.0	loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.