CVE-2017-5069

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page...

CVE-2017-5069

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page...

CVE-2017-5069

CVE-2017-5069 affects Google Chrome (Blink) and its XSS-Protection reporting mime types. Root cause: incorrect MIME type handling in Blink, allowing a crafted HTML page to bypass Cross-Origin Resource Sharing checks. Impact: mitigates same-origin policy checks; versioned fixes exist in Chrome 58....

CVE-2017-5069

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page...

CVE-2017-5069

Removed by vendor...

BSA-2017-432

Security Advisory ID : BSA-2017-432 Component : JOBSS Revision : 2.0: Interim Red HatJBossEAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact. Affected Products Brocade is investigating...

Design/Logic Flaw

Console: CORS headers set to allow all in Red Hat AMQ...

NexusPHP SQL Injection Vulnerability (CNVD-2017-27285)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the forummanage.php file in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability to obtain database information...

Debian DSA-3974-1 : tomcat8 - security update

Two issues were discovered in the Tomcat servlet and JSP engine. - CVE-2017-7674 Rick Riemer discovered that the Cross-Origin Resource Sharing filter did not add a Vary header indicating possible different responses, which could lead to cache poisoning. - CVE-2017-7675 stretch only Markus...

[SECURITY] [DSA 3974-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3974-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3974-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3974-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 15, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the kernel/events/core.c component of the operating system allows a hacker to increase their privileges.

The vulnerability in the kernel/events/core.c component of the Linux operating system exists due to insufficient checking of resource states when resources can be shared among different processes. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a...

CVE-2017-5069

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page...

Insecure 'Access-Control-Allow-Origin' Header

Cross Origin Resource Sharing CORS is an HTML5 technology which gives modern web browsers the ability to bypass restrictions implemented by the Same Origin Policy. The Same Origin Policy requires that both the JavaScript and the page are loaded from the same domain in order to allow JavaScript to...

CVE-2016-9725

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

CVE-2016-9725

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

Cross site scripting

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

CVE-2016-9725

IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing CORS, which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. IBM Reference : 1999539...

CVE-2016-9725

CVE-2016-9725 affects IBM QRadar Incident Forensics (7.2.x). The issue is described as overly permissive Cross-Origin Resource Sharing (CORS) policies in the Incident Forensics component, enabling cross-origin requests that would normally be restricted. Connected IBM bulletin references confirm t...