Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0.1. It is, therefore, potentially affected by several issues : - A logic error in Safari's handling of the Quarantine attribute caused the safe mode not to be triggered on Quarantined files, which could lead to t...

Which Browser Offers the Most Secure Password Storage?

Considering the availability of browser-based password management and auto-fill systems and the intuition that you should never put all your eggs in one basket, do the three major browsers offer robust enough security features to justify trusting them with your passwords and, in some cases, credi...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

Binary data 800967.prm...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

Information disclosure

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

CVE-2012-2821

CVE-2012-2821 affects Google Chrome/Chromium’s autofill display prior to version 20.0.1132.43. The underlying issue is in the autofill implementation where text is not properly displayed, with unspecified impact beyond the CVSS-derived metrics. Connected documents corroborate its inclusion in Chr...

CVE-2012-2821

The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors...

CVE-2012-2821

Removed by vendor...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 20.0.1132.43 and is, therefore, affected by the following vulnerabilities : - An error exists related to the loading of the 'metro' DLL. CVE-2012-2764 - An error exists related to the leaking of iframe fragment id...

CVE-2011-3085

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

Design/Logic Flaw

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

CVE-2011-3085

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

CVE-2011-3085

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

CVE-2011-3085

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

CVE-2011-3085

The CVE-2011-3085 issue affects Chromium/Chrome’s Autofill UI, where long field values were not properly restricted, causing UI corruption and potentially spoofing. The OpenVAS/OpenSUSE entries corroborate CVE-2011-3085 and show Chromium updates fixing multiple 2011-era CVEs, including UI-related...

CVE-2011-3085

Removed by vendor...

Apple Safari 'AutoFill web forms'功能信息泄露漏洞

Bugtraq ID: 48839 CVE ID：CVE-2011-0217 Apple Safari是一款流行的WEB浏览器。 Safari浏览器的"AutoFill web forms"功能可填充不可见表单字段，在用户提交表单之前站上的脚本可访问这些信息。 Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0...

CVE-2011-0217

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...

Design/Logic Flaw

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields...