CVE-2012-5125

Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs...

CVE-2012-5125: Use After Free

Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs...

PT-2012-5790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 23.0.1271.64 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to the handling of extension...

PT-2012-4312

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.57 on Linux Description The issue is related to the improper handling of tabs, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via...

Cross site scripting

Cross-site scripting XSS vulnerability in og.js in the Organic Groups OG module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title...

CVE-2012-3800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in og.js in the Organic Groups OG module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title...

CVE-2012-3800

The vulnerability CVE-2012-3800 affects the Organic Groups module for Drupal (6.x-2.x) prior to 6.x-2.4 when used with the Vertical Tabs module. The issue is an XSS in og.js that allows remote authenticated users to inject arbitrary script or HTML via the group title. The Drupal security advisory...

PT-2012-5010

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x before 6.x-2.4 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the og.js file in the Organic Groups OG module for Drupal when used in conjunction with the...

CVE-2012-3800

Cross-site scripting XSS vulnerability in og.js in the Organic Groups OG module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title...

SA-CONTRIB-2012-092 - Organic Groups - Cross Site Scripting (XSS) and Access Bypass

The Organic Groups module enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. Cross Site Scripting The module doesn't sufficiently filter user supplied text when used in connectio...

Mozilla Foundation Security Advisory 2011-45

Mozilla Foundation Security Advisory 2011-45 Title: Inferring keystrokes from motion data Impact: Moderate Announced: September 27, 2011 Products: Firefox, SeaMonkey Fixed in: Firefox 7.0 SeaMonkey 2.4 Description University of California, Davis researchers Liang Cai and Hao Chen presented a pape...

Inferring keystrokes from motion data — Mozilla

University of California, Davis researchers Liang Cai and Hao Chen presented a paper at the 2011 USENIX HotSec workshop on inferring keystrokes from device motion data on mobile devices. Web pages can now receive data similar to the apps studied in that paper and likely present a similar risk. We...

CVE-2011-2357

Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by 1 causing the MAXTAB number of tabs to be opened, then loading a URI to the targeted...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

Code injection

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...

CVE-2011-1435

Removed by vendor...

CVE-2011-1435

Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...

CVE-2011-1435: Incorrect Default Permissions

Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension...