CVE-2018-5181

If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with...

Brave Browser Denial of Service Vulnerability

Brave Browser is a web browser from Brave Software, USA. A security vulnerability exists in Brave Browser versions prior to 0.13.0, which originates from an unscripted open tab that can be allowed to be closed. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2018-9034

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

CVE-2018-9034

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

CVE-2018-9034

CVE-2018-9034 affects the WordPress Relevanssi plugin, specifically version 4.0.4 (and possibly earlier). The vulnerability is a Reflected XSS in lib/interface.php where the GET parameter tab is read and echoed into HTML without proper escaping, allowing an attacker to inject arbitrary JavaScript...

Denial of service

Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service...

PT-2018-4887

Name of the Vulnerable Software and Affected Versions Brave Browser versions prior to 0.13.0 Description The issue allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service. Recommendations For versions prior to 0.13.0, update to version 0.13.0 or lat...

PT-2018-18796

Name of the Vulnerable Software and Affected Versions Relevanssi plugin version 4.0.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary JavaScript or HTML. This is achieved via the tab GET parameter in the lib/interface.php file. Recommendations Fo...

CVE-2018-9034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

XenMobile: 500 Server Internal Error (exid:16200BC6AC0-503E3024D00ABC1E4C352FFA2DAD6AC0) when we click on Manage > User

When you click Users tab on XenMobile server receiving error - 500 Server Internal Error exid:16200BC6AC0-503E3024D00ABC1E4C352FFA2DAD6AC0...

PT-2018-16784

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 59 Description A spoofing issue can occur when a malicious site with a very long domain name is opened in an Android Custom Tab and the default browser is Firefox for Android. This could allow an attacker ...

CVE-2018-8767

joyplus-cms 1.6.0 has XSS in manager/adminajax.php?action=save&tab=prevodtype via the tname parameter...

Mozilla Firefox Domain Spoofing Vulnerability (CNVD-2018-07310)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A domain spoofing vulnerability exists in Mozilla Firefox. A remote user can exploit the vulnerability to spoof domain names via the Android Custom Tab. Android-based systems are affected...

PT-2018-18599

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 Description The issue is related to Stored XSS and is associated with the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen. Recommendations F...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2018-07309)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A same-origin policy bypass vulnerability exists in Mozilla Firefox. A remote user can bypass the same-origin policy and access data in another tab by invoking a shared worker via the 'data:' U...

PT-2018-17339

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Description The issue concerns an object lifecycle problem in Chrome Custom Tab, allowing a remote attacker to spoof the contents of the Omnibox URL bar by using a crafted HTML page. Recommendation...

StoreFront 3.12.1000.1 - Customize the browser tab name when browsing the SFWeb URL

Renaming the browser tab name when browsing the SFWeb URL...

WolfCMS Cross-Site Scripting Vulnerability (CNVD-2018-07056)

Wolf CMS is a lightweight content management system written in PHP. A stored cross-site scripting vulnerability exists in WolfCMS 0.8.3.1 in the Layout Name under the Layout tab. A low-privileged user can exploit this vulnerability to steal cookies from administrative users and compromise the...

UBUNTU-CVE-2018-5143

URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scripting XSS attacks, but if a tab character is embedded in the "javascript:" URL the protocol is not removed and the script will execute. This could allow users to be socially...