PT-2016-2138

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera affected versions not specified Description The issue is related to the extensions/renderer/runtime custom bindings.cc component in Google Chrome and Opera, where side effects are not consider...

PT-2016-2139

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera affected versions not specified Description The issue arises from the failure to ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL in th...

PT-2016-2156

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the ServiceWorkerContainer::registerServiceWorkerImpl function in...

PT-2016-2166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the ModuleSystem::RequireForJsInner function in the extension bindings, which mishandles properties. This allows remote...

PT-2016-2157

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 OpenJPEG affected versions not specified PDFium affected versions not specified Opera affected versions not specified Description The issue is caused by a heap-based buffer overflow in the opj j2k...

PT-2016-2165

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This is related to errors in the code of the Blink...

PT-2016-2162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the improper use of prototypes in the extensions/renderer/resources/binding.js component of the extension bindings. This...

PT-2016-2164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to errors in the code of the extensions subsystem, allowing a remote attacker to bypass the existing access restriction policy,...

PT-2016-2163

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, relate...

PT-2016-2144

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the deletion of HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid...

PT-2016-2151

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the renderer implementation in the browser, which does not properly restrict public exposure of classes. This allows remote...

PT-2016-2159

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera versions prior to 51.0.2704.63 Description The issue is related to the ToV8Value function in the V8 bindings, which does not properly restrict the use of getters and setters. This allows remot...

PT-2016-2158

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the ports/SkFontHost FreeType.cpp component of Skia, used in Google Chrome and Opera. This...

PT-2016-2145

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue concerns the browser/safe browsing/srt field trial win.cc component in Google Chrome, which does not use the HTTPS protocol for the...

PT-2016-2148

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the Autofill implementation, which mishandles the interaction between field updates and JavaScript code that triggers a fram...

eventur.sis.pitt.edu XSS vulnerability

Vulnerable URL: http://eventur.sis.pitt.edu/eventList.jsp?oid=12=Pittsburgh%20Opera1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

PT-2016-4895

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.102 Opera affected versions not specified Description The issue is related to the TreeScope::adoptIfNeeded function in the DOM implementation in Blink, which does not prevent script execution during...

PT-2016-4897

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.102 Opera affected versions not specified Description The issue is related to a race condition in the ResourceDispatcherHostImpl::BeginRequest function, which allows remote attackers to make arbitrary...

PT-2016-4896

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.102 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to the improper creation context used by the...

PT-2016-4890

Name of the Vulnerable Software and Affected Versions Blink versions prior to 50.0.2661.94 Google Chrome versions prior to 50.0.2661.94 Opera versions prior to 50.0.2661.94 is not specified, however, it is mentioned that Opera is affected. Description The issue is related to the mishandling of...