82 matches found
Mozilla Firefox onreadystatechange Event Use After Free
Added: 08/22/2013 CVE: CVE-2013-1690 BID: 60778 OSVDB: 94584 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem A use-after-free vulnerability is triggered when handling onreadystatechange events and Event or Page reloads at t...
CVE-2012-3558
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...
CVE-2012-3558: Undefined Security Weakness
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...
Carefully timed reloads, redirects, and navigation can spoof the address field
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site's address, while the attacking site is still being displaye...
Carefully timed reloads, redirects, and navigation can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site’s address, while the attacking site is still being displaye...
Opera Multiple Vulnerabilities - March12 (MacOSX)
The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnmar12macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Opera Multiple Vulnerabilities - March12 MacOSX Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod,...
Opera Multiple Vulnerabilities - March12 (Linux)
The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnmar12lin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera Multiple Vulnerabilities - March12 Linux Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbone Networks GmbH,...
Opera Multiple Vulnerabilities (Mar 2012) - Linux
Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera < 11.62 Multiple Vulnerabilities
Binary data 800859.prm...
Opera < 11.62 Multiple Vulnerabilities
Binary data 6399.prm...
Carefully timed reloads and redirects can spoof the address field
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site's address, while the attacking site is still...
Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...
Cisco IOS SSL VPN Vulnerability (cisco-sa-20100922-sslvpn)
Cisco IOS Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...
FreeBSD : opera -- multiple vulnerabilities (aab187d4-e0f3-11df-b1ea-001999392805)
The Opera Desktop Team reports : - Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. - Fixed an issue where manipulating the window could be used to spoof the page address. - Fixed an issue with reloads and redirect...
CVE-2010-4045
CVE-2010-4045 affects Opera before 10.63. The vulnerability arises because Opera does not properly restrict web scripts in unspecified circumstances involving reloads and redirects, allowing a remote attacker to spoof the Address Bar and perform cross-site scripting (XSS) attacks; in some cases t...
Opera < 10.63 Multiple Vulnerabilities
Binary data 5678.prm...
Reloads and redirects can allow spoofing and cross site scripting
Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed reloads and redirects, when combined with appropriate caching, can cause scripts to execute in the wrong security context in Opera. This allow...
Cisco IOS SSL VPN Vulnerability
Cisco IOS® Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...
