69 matches found
UBUNTU-CVE-2019-5861
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...
Input validation
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...
CVE-2019-5861
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...
CVE-2019-5861
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...
CVE-2019-5861
CVE-2019-5861 affects Chromium/Blink prior to 76.0.3809.87, where an error in determining the click location could allow bypassing anti-clickjacking (content spoofing). Affected component: Blink/WebKit click-location logic in Chromium before the fixed version. Impact per advisories: potential con...
chromium-browser: Click location incorrectly checked
Insufficient data validation in Blink in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to bypass anti-clickjacking policy via a crafted HTML page...
PT-2019-5032
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 76.0.3809.87 Description The issue is related to insufficient data validation in Blink, allowing a remote attacker to bypass anti-clickjacking policy via a crafted HTML page. This can lead to a violation of data...
NoScript Anywhere Released, Supports Firefox Mobile on Android Devices
The new version of NoScript, the popular browser add-on that blocks JavaScript and other embedded objects from running on Web pages, is out in alpha form and it can now run on Android-based smartphones, giving users protection against script-based attacks on their mobile devices. The release of...
Opera < 11.01 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.01. Such versions are potentially affected by the following issues : - The Cascading Style Sheets CSS Extensions for XML implementation recognizes links to javascript: URLs in the -o-link property, which could be abused ...