357 matches found
CVE-2012-2899
Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors involving the document.write method...
CVE-2012-2886
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...
CVE-2012-2889
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...
Cross site scripting
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...
Cross site scripting
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...
CVE-2012-2886
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...
CVE-2012-2889
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS UXSS."...
CVE-2012-2886
Removed by vendor...
CVE-2012-2886
CVE-2012-2886 corresponds to a UXSS (Universal XSS) vulnerability in Chromium/Google Chrome reported as affecting Chrome before 22.0.1229.79, where an attacker could inject arbitrary script via the Google V8 bindings. The connected advisories show that Chromium/OpenSUSE patches were released to a...
CVE-2012-2886
Cross-site scripting XSS vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka "Universal XSS UXSS."...
CVE-2012-2889
CVE-2012-2889 is a cross-site scripting (UXSS) vulnerability in WebKit/Chromium that allows a remote attacker to inject script via frame handling in Chrome versions prior to 22.0.1229.79. The CVE is referenced in openSUSE/OpenSUSE security advisories and Safari/Nessus entries, confirming the fram...
CVE-2012-4905
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
Cross site scripting
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
CVE-2012-4904
Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS UXSS" attacks against the current tab...
Cross site scripting
Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS UXSS" attacks against the current tab...
CVE-2012-4904
Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by "Universal XSS UXSS" attacks against the current tab...
CVE-2012-4905
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
CVE-2012-4905
The CVE-2012-4905 entry describes a UXSS (Universal XSS) flaw in Chrome for Android prior to 18.0.1025308. By sending a crafted Intent with javascript: URIs and by inserting Extra data (com.android.browser.application_id => com.android.chrome) into an Intent, an attacker could execute arbitrar...
CVE-2012-4905
Removed by vendor...
CVE-2012-4904
CVE-2012-4904 is a Cross-site scripting (UXSS) vulnerability in Google Chrome for Android, affecting versions before 18.0.1025308. The issue allows remote attackers to inject arbitrary web script via unspecified vectors, demonstrated as UXSS attacks on the current tab. Affected product: Google Ch...