CVE-2015-7369

The default Flash cross-domain policy crossdomain.xml in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors...

CVE-2015-7369

Revive Adserver before 3.2.2 is affected by multiple CVEs (including CVE-2015-7369: overly permissive crossdomain.xml) that enable cross-domain attacks and session cookie exposure. Core issue: default crossdomain.xml permissions allow access from other domains, facilitating cross-domain attacks. ...

CVE-2015-7369

The default Flash cross-domain policy crossdomain.xml in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors...

PT-2015-7532

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.2 Description The issue concerns the default Flash cross-domain policy, specifically the crossdomain.xml file, which does not properly restrict cross-domain access. This allows remote attackers to conduct...

CVE-2015-7369: Improper Access Control

The default Flash cross-domain policy crossdomain.xml in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors...

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 OS X El Capitan 10.11 is now available and addresses the following: Address Book Available for: Mac OS X v10.6.8 and later Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book framework Description: An issu...

Gratipay: implement a cross-domain policy for Adobe products

The suggestion was to set X-Permitted-Cross-Domain-Policies: master-only. From Adobe per: Normally a meta-policy is declared in the master policy file, but for those who can’t write to the root directory, they can also declare a meta-policy using the X-Permitted-Cross-Domain-Policies HTTP respons...

Apple iOS Cross-Domain COOKIE Handling Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows man-in-the-middle attackers to exploit a cross-domain cookie handling vulnerability to track the WEB activity of targeted users...

Apple iOS Webkit Malicious Cross-Domain Style Expression Handling Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS Webkit's handling of special cross-domain style sheets allows attackers to construct malicious WEB pages that can be parsed by tricking users into obtaining informati...

Apple Safari Cross-Domain Image Data Access Vulnerability

Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that allows remote attackers to exploit a vulnerability to construct malicious WEB pages that can be tricked into parsing by the user to access image data across domains...

Apple Safari Cross-Domain Sensitive Information Disclosure Vulnerability

Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that can be exploited by remote attackers to construct malicious web pages that can be tricked into being parsed by users, and that can be used to obtain cookie information from different domains via a...

Adobe AIR < 17.0.0.144 Multiple Vulnerabilities (APSB15-05)

Binary data 8823.prm...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04628)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. An information disclosure vulnerability exists in versions 9 through 11 of Microsoft Internet Explorer, which allows remote attackers to exploit the vulnerability to read...

Adobe Flash Player Security Bypass (APSB15-16: CVE-2015-3114)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the way Adobe Flash Player handles verification of cross domain policy files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

PT-2015-1636

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description The issue is related to the lack of protection for service data, allowing a remote attacker to read content from a different domain or zone via a crafted web site. This is an...

Microsoft Internet Explorer CVE-2015-1729 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to view content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information or aid in further...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS15-065: CVE-2015-1729)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

CVE-2015-1729: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

Adobe Flash Player and AIR Cross-Domain Information Disclosure Vulnerability (CNVD-2015-04572)

Adobe Flash Player is an integrated multimedia player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR have cross-domain information...

Adobe Flash Player and AIR Cross-Domain Information Disclosure Vulnerability (CNVD-2015-04574)

Adobe Flash Player is an integrated multimedia player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR have cross-domain information...