CVE-2004-0191

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page zombie document and enable cross-domain and cross-site scripting XSS attacks, as demonstrated using onmousemove events...

CVE-2003-1326

Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."...

CVE-2003-1326

Microsoft Internet Explorer 5.5 and 6.0 are affected by CVE-2003-1326, which enables remote attackers to bypass cross-domain security and execute script or arbitrary code via dialog boxes. The issue centers on improper handling of dialog frames and the dialogArguments mechanism, enabling cross-do...

CVE-2003-1328

The showHelp function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."...

CVE-2003-1328

The CVE concerns Microsoft Internet Explorer 5.01, 5.5, and 6.0, where the showHelp() function supports certain pluggable protocols that can bypass the cross‑domain security model and allow remote code execution. The OpenVAS entries reference the affected patches (MS03-004 and MS05-020) and indic...

GLSA-200408-23 : kdelibs: Cross-domain cookie injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-23 kdelibs: Cross-domain cookie injection vulnerability kcookiejar contains a vulnerability which may allow a malicious website to set cookies for other websites under the same second-level domain. This vulnerability applie...

KDE Security Advisory: Konqueror Cross-Domain Cookie Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection Original Release Date: 2004-08-23 URL: http://www.kde.org/info/security/advisory-20040823-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0746 1. Systems affecte...

[ GLSA 200408-23 ] kdelibs: Cross-domain cookie injection vulnerability

Gentoo Linux Security Advisory GLSA 200408-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mozilla < 1.0.1 XMLSerializer Cross-domain Policy Access (deprecated)

Binary data 1756.prm...

Galeon < 1.2.7 XMLSerializer Cross-domain Policy Access (deprecated)

Binary data 1757.prm...

Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)

Binary data 1772.prm...

Mozilla Browser 'onclick' Property Cross Domain Violation (deprecated)

Binary data 1323.prm...

Cross-Domain Policy File (crossdomain.xml) Detection

Binary data 4505.prm...

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

CVE-2004-0720

Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

Opera < 7.53 Multiple Vulnerabilities

The version of Opera installed on the remote host is vulnerable to two security issues : - A cross domain frame loading vulnerability. - An unspecified vulnerability in the way it handles certificates. An attacker may exploit one of these flaws to impersonate a web server. C Tenable Network...

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting

source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust relationships between method calls that ar...

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itsel...

US-CERT Technical Cyber Security Alert TA04-163A -- Cross-Domain Redirect Vulnerability in Internet Explorer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-163A Cross-Domain Redirect Vulnerability in Internet Explorer Original release date: June 11, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems Overview A cross-domain vulnerability in...