vciy

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6: 30 records in one advisory

30 records announced together, published between 2010-06-11 and 2010-11-20, every one of them citing the same advisory.

The advisory

Every record in this batch cites http://www.vupen.com/english/advisories/2011/0212. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

22 of 30 records name something of its own. For the other 8, held sources say the same thing about each.

What this page does not cover

This batch is 30 of the 204 records that cite the same advisory. The other 174 are different findings announced alongside it.

21 of them are on the sibling batch linked below. The remaining 153 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: vupen-0212-66840bd182

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2010-1388no title held
CVE-2010-1398ordered insertions insertion
CVE-2010-1399no title held
CVE-2010-1403no title held
CVE-2010-1408outbound connections non-default ports
CVE-2010-1410no title held
CVE-2010-1413ntlm cleartext
CVE-2010-1415libxml contexts api abuse
CVE-2010-1422keyboard occur key press
CVE-2010-1764follows redirections recording
CVE-2010-1770transformation ibm1147
CVE-2010-1774no title held
CVE-2010-1782no title held
CVE-2010-1783dynamic modification
CVE-2010-1785first-line pseudo-elements
CVE-2010-1788no title held
CVE-2010-1790just-in-time jit compiled stubs
CVE-2010-1792regular expression
CVE-2010-3810bar's add
CVE-2010-38173d transforms
CVE-2010-3819no title held

30 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.