CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5827

WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference via vectors involving a 1 custom event, 2 message event, or 3 pop state event...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5788

The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...

PT-2015-2085

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a lack of protection for internal data in the WebKit component of the iOS operating system. This can be exploited by a remote attacker to bypass existing access restriction rule...

UBUNTU-CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

PT-2015-2084

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which has inadequate access control. This allows remote attackers to bypass the Same Origin Policy by creating a crafted web site. The problem...

PT-2015-2137

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit Canvas implementation, which lacks protection of service data. This can be exploited by a remote attacker to bypass the Same Origin Policy and gain access to sensitiv...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5826: Improper Access Control

WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets CSS document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2015-5788: Exposure of Sensitive Information to an Unauthorized Actor

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5827: Exposure of Sensitive Information to an Unauthorized Actor

WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain an object reference via vectors involving a 1 custom event, 2 message event, or 3 pop state event...

[USN-2735-1] Oxide vulnerabilities

========================================================================== Ubuntu Security Notice USN-2735-1 September 08, 2015 oxide-qt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

Binary data 8858.prm...

ASUS RT-N16 - Text-plain Admin Password Disclosure

Description ----------- Several ASUS routers include reflected Cross-Site Scripting CWE-79 and authentication bypass CWE-592 vulnerabilities. An attacker who can lure a victim to browse to a web site containing a specially crafted JavaScript payload can execute arbitrary commands on the router as...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2735-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2735-1 advisory. It was discovered that the DOM tree could be corrupted during parsing in some circumstances. If a user were tricked in to opening a specially crafted...

Ubuntu: Security Advisory (USN-2735-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox < 40.0 Multiple Vulnerabilities

Binary data 8856.prm...

Microsoft Exchange Server information Disclosure Vulnerability (3089250)

This host is missing an important security update according to Microsoft Bulletin MS15-103. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

USN-2735-1: Oxide vulnerabilities

It was discovered that the DOM tree could be corrupted during parsing in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions or cause a denial of service. CVE-2015-1291 An issue was...