521 matches found
Google Chrome Access Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. The use of the DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debuggerapi.cc in versions of Google Chrome prior to 41.0.2272.76 fails to properly restrict the debugging targets that can be used as the URLs,...
CVE-2015-1226
The CVE-2015-1226 entry refers to a vulnerability in Google Chrome prior to 41.0.2272.76 where DebuggerFunction::InitAgentHost did not properly restrict which URLs could be used as debugger targets. This allowed remote attackers to bypass intended access restrictions via a crafted extension. Affe...
chromium-browser: Validation issue in debugger
The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debuggerapi.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension...
CVE-2014-3947
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors...
CVE-2011-3049
Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service disrupted system requests via a crafted extension...
CVE-2011-3049
Removed by vendor...
CVE-2011-3055
The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension...
CVE-2011-3055
The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension...
CVE-2011-3055
Removed by vendor...
CVE-2011-3956
Removed by vendor...
CVE-2011-2785
The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension...
CVE-2011-2785
Removed by vendor...
CVE-2011-2785
The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension...
CVE-2011-1435
Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...
CVE-2011-1435
Removed by vendor...
Debian DSA-2192-1 : chromium-browser - several vulnerabilities
Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0779 Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a...
CVE-2011-0779
Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service application crash via a crafted extension...
CVE-2011-0479
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer...