Microsoft Office Online Server Spoofing Vulnerability (CNVD-2020-16646)

Microsoft Office Online Server is a set of Web-based Office suite of Office servers from the U.S. Microsoft Microsoft. The product provides browser-based Word, Excel and other office software. A security vulnerability exists in Microsoft Office Online Server that stems from the program not proper...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-16648)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge that stems from the program failing to properly enforce cross-site policies. An attacker could exploit the vulnerability t...

jquery: Cross-site scripting via cross-domain ajax requests

jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...

Microsoft Windows Multiple Vulnerabilities (KB4532693)

This host is missing a critical security update according to Microsoft KB4532693 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0663

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

CVE-2020-0663

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

CVE-2020-0663

CVE-2020-0663 affects Microsoft Edge. The vulnerability is an elevation of privilege caused by Edge not properly enforcing cross-domain policies, enabling an attacker to access data from one domain and inject it into another. Documents repeatedly describe this as a cross-domain policy enforcement...

Microsoft Edge Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is used ...

CVE-2020-0663: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

Insolar: XDSI(Cross Domain Script Inclusion)

Summary: As I did not get the proper CWE id over id to add but the proper CWE id is 829: The page includes one or more script files from a third-party domain. Here you are including in your website, someone else's code; You don't have any control over what is in that code, and you don't have any...

CVE-2019-17014

If an image had not loaded correctly such as when it is not actually an image, it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox 71...

Design/Logic Flaw

If an image had not loaded correctly such as when it is not actually an image, it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox 71...

CVE-2019-17014

If an image had not loaded correctly such as when it is not actually an image, it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox 71...

CVE-2019-17014

If an image had not loaded correctly such as when it is not actually an image, it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox 71...

Symantec Norton Password Manager Access Control Error Vulnerability

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...

Symantec Norton Password Manager Access Control Error Vulnerability (CNVD-2020-09627)

Symantec Norton Password Manager is a password management application from Symantec USA. An access control error vulnerability exists in Symantec Norton Password Manager versions prior to 6.6.2.5, which can be exploited by an attacker to request restricted cross-domain resources...

ACSC Releases Fundamentals of Cross Domain Solutions

The Australian Cyber Security Centre ACSC has released a cybersecurity guide outlining the fundamentals of cross domain solution CDS technologies. This guidance provides cross domain security principles to enable organizations to share information securely across separated networks. The...

CVE-2019-17014

If an image had not loaded correctly such as when it is not actually an image, it could be dragged and dropped cross-domain, resulting in a cross-origin information leak. This vulnerability affects Firefox 71...

Mozilla Firefox Source Validation Error Vulnerability

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A source validation error vulnerability exists in Mozilla Firefox versions prior to 71. The vulnerability stems from an error when handling unsuccessfully loaded images loaded data that is not an image...