CVE-2014-4409

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

CVE-2014-4409: Exposure of Sensitive Information to an Unauthorized Actor

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

Webcam 2Way Videochat < 4.41.2 - Cross-Site Scripting (XSS)

The 2Way VideoCalls – HTML5 Webcam Videochat WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2014-0153

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page...

Cross site request forgery (csrf)

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page...

CVE-2014-0153

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page...

CVE-2014-0153

CVE-2014-0153 affects oVirt REST API prior to the 3.4.1/3.4.x updates, where session IDs are stored in HTML5 local storage. The underlying risk is that an attacker could read a user’s session ID from local storage via a crafted web page, leading to potential confidentiality impact. Affected softw...

CVE-2014-0153: Exposure of Sensitive Information to an Unauthorized Actor

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page...

php云问答功能处存储型xss

简要描述： 需要主动触发。 详细说明： http://www.hr135.com/ask/index.php 测试地址：http://www.hr135.com/ask/index.php?c=content&id=162 超级链接写入：javascriptalert1 &NewLine是HTML5新增的实体命名编码 firebug之类工具修改链接名称增加欺骗性 成功触发JS 使用追问功能再次添加超级链接：javascriptalertdocument.cookie 成功弹出cookie 漏洞证明：...

HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php Multiple Parameter Stored XSS Weakness

The HTML5 jQuery Audio Player WordPress plugin was affected by a playlist/addplaylist.php Multiple Parameter Stored XSS Weakness security vulnerability...

HTML5 jQuery Audio Player 2.3 - playlist/add_playlist.php id Parameter SQL Injection

The HTML5 jQuery Audio Player WordPress plugin was affected by a playlist/addplaylist.php id Parameter SQL Injection security vulnerability...

mb.miniAudioPlayer 1.4.2 - TinyMCE Popup Unspecified Issue

The mb.miniAudioPlayer – an HTML5 audio player for your mp3 files WordPress plugin was affected by a TinyMCE Popup Unspecified Issue security vulnerability...

HTML5 AV Manager 0.2.7 - Arbitrary File Upload

The html5avmanager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - SQL Injection

This plugin is prone to a playlist/addplaylist.php id parameter SQL injection vulnerability. Solution Update this plugin...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - Stored XSS

This plugin is prone to a playlist/addplaylist.php multiple parameter stored cross site scripting vulnerability. Solution Update the plugin...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - Stored XSS

This plugin is prone to a playlist/addplaylist.php multiple parameter stored cross site scripting vulnerability. Solution Update the plugin...

ZooEffect 1.08 - HTTP Referer Reflected XSS

Description The ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 WordPress plugin was affected by a HTTP Referer Reflected XSS security vulnerability...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - SQL Injection

This plugin is prone to a playlist/addplaylist.php id parameter SQL injection vulnerability. Solution Update this plugin...

VideoWhisper Live Streaming Integration 4.27.3 - Multiple Vulnerabilities

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

[SECURITY] Fedora 20 Update: guacamole-server-0.8.4-3.fc20

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop prot ocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...