Lucene search
+L

110 matches found

OSV
OSV
added 2019/12/18 10:15 p.m.9 views

CVE-2019-19788

Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction...

5.5CVSS6.1AI score0.0029EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/18 10:15 p.m.18 views

CVE-2019-19788

Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction...

5.5CVSS5.4AI score0.0029EPSS
SaveExploits0References1
Opera Security Advisories
Opera Security Advisories
added 2019/12/13 12:00 a.m.10 views

Bypass a restriction in OfA 54 – Opera Security Advisories

Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction...

5.5CVSS6.1AI score0.0029EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/08/26 12:00 a.m.22 views

Mozilla Firefox ESR < 45.3 Multiple Vulnerabilities

Binary data 9485.prm...

9.8CVSS8.2AI score0.04577EPSS
SaveExploits2References20
OSV
OSV
added 2016/08/05 1:59 a.m.13 views

CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

6.1CVSS8.4AI score
SaveExploits0References11
OSV
OSV
added 2016/08/05 1:59 a.m.6 views

DEBIAN-CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

6.1CVSS7.6AI score0.01464EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/12/12 12:00 a.m.45 views

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : firefox vulnerabilities (USN-2052-1)

Ben Turner, Bobby Holley, Jesse Ruderman, Christian Holler and Christoph Diehl discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or...

10CVSS8.2AI score0.11076EPSS
SaveExploits13References16
Tenable Nessus
Tenable Nessus
added 2013/06/27 12:00 a.m.35 views

Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1890-1)

Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute arbitrary code with the privileges of the user invoking...

10CVSS8.7AI score0.69021EPSS
SaveExploits11References17
OpenVAS
OpenVAS
added 2010/07/12 12:00 a.m.43 views

Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

9.3CVSS0.8AI score0.0211EPSS
SaveExploits5References1
CVE
CVE
added 2010/07/06 5:00 p.m.65 views

CVE-2010-2646

CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...

9.3CVSS9.1AI score0.00851EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder