CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

Cross site request forgery (csrf)

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

Mozilla Firefox < 47.0 Multiple Vulnerabilities

Binary data 9383.prm...

The vulnerability of Google Chrome allows a perpetrator to bypass the CSP security mechanism.

The vulnerability of the ServiceWorkerContainer::registerServiceWorkerImpl function WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in the Google Chrome browser’s Blink component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor...

CVE-2016-3198

Microsoft Edge allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."...

CVE-2016-3198

Microsoft Edge allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."...

CVE-2016-3198

CVE-2016-3198 affects Microsoft Edge (and related Edge components) with a CSP bypass vulnerability: Edge CSP fails to validate certain crafted documents, enabling remote bypass of the Content Security Policy. Public exploit activity is indicated in some sources, and the issue is addressed by a Mi...

CVE-2016-3198: Undefined Security Weakness

Microsoft Edge allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."...

Google Chrome < 51.0.2704.63 Multiple Vulnerabilities

Binary data 9372.pasl...

Microsoft Edge Security Feature Bypass Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security feature bypass vulnerability exists in Microsoft Edge's Content Security Policy CSP, which stems from the program failing to properly validate certain...

Microsoft Edge Multiple Vulnerabilities (3163656)

This host is missing a critical security update according to Microsoft Bulletin MS16-068. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...

Microsoft Edge Security Feature Bypass (MS16-068: CVE-2016-3198)

A vulnerability was discovered within Mirosoft EDGE that could allw security feature bypass. The vulnerability could allow an attacker to bypass the Content Security Policy CSP...

CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

Cross site scripting

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

CVE-2016-2833

Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2016-03997)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 47.0, which stems from the program failing to perform Content Security Policy CSP checks. The vulnerability can be exploited...