650 matches found
CVE-2010-3413: Undefined Security Weakness
Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attackers to cause a denial of service application crash via unknown vectors...
CVE-2010-3171
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random number generator that is seeded only once per document object, which makes it easier for remote attackers to track a user, or trick a user into acti...
Code injection
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random number generator that is seeded only once per document object, which makes it easier for remote attackers to track a user, or trick a user into acti...
CVE-2010-3171
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8, and 4.0 Beta1 uses a random number generator that is seeded only once per document object, which makes it easier for remote attackers to track a user, or trick a user into acti...
CVE-2010-3171
CVE-2010-3171 relates to the Firefox JavaScript Math.random() seed being initialized only once per document object, making it easier for remote attackers to track a user or trigger in-session phishing via spoofed pop-ups. The issue ties to an underlying fix (CVE-2008-5913) that was not fully corr...
CVE-2010-3246
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
Authentication flaw
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
CVE-2010-3246
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
CVE-2010-3246
CVE-2010-3246 affects Google Chrome
CVE-2010-3246
Removed by vendor...
CVE-2010-3246
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
CVE-2010-3246
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
CVE-2010-3246: Undefined Security Weakness
Google Chrome before 6.0.472.53 does not properly handle the blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors...
Google Chrome < 6.0.472.53 Multiple Vulnerabilities
Binary data 800892.prm...
Google Chrome < 6.0.472.53 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 6.0.472.53. It therefore is reportedly affected by multiple vulnerabilities : - It is possible to bypass the pop-up blocker with a blank frame target . Issue 34414 - It is possible to visually spoof the URL bar with...
JavaScript Settings
The Content category contains an option to block annoying pop-up windows. Be sure to check that box. From this screen, you can disable specific JavaScript features by clicking on the Advanced button. See next screen...
Code injection
The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...
Apple Safari parent.close() Invalid Pointer Code Execution
Added: 05/28/2010 CVE: CVE-2010-1939 BID: 39990 OSVDB: 64482 Background Safari is a web browser for Mac OS X and Windows. Problem Apple Safari 4.0.5 for Windows and probably earlier allows remote attackers to execute arbitrary code by enticing the user to open a crafted HTML document. The crafted...
Apple Safari parent.close() Invalid Pointer Code Execution
Added: 05/28/2010 CVE: CVE-2010-1939 BID: 39990 OSVDB: 64482 Background Safari is a web browser for Mac OS X and Windows. Problem Apple Safari 4.0.5 for Windows and probably earlier allows remote attackers to execute arbitrary code by enticing the user to open a crafted HTML document. The crafted...
Apple Safari parent.close() Invalid Pointer Code Execution
Added: 05/28/2010 CVE: CVE-2010-1939 BID: 39990 OSVDB: 64482 Background Safari is a web browser for Mac OS X and Windows. Problem Apple Safari 4.0.5 for Windows and probably earlier allows remote attackers to execute arbitrary code by enticing the user to open a crafted HTML document. The crafted...