MiracleLinux 4 : nspluginwrapper-1.4.4-1.AXS4 (AXSA:2012-1033:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-1033:01 advisory. nspluginwrapper makes it possible to use Netscape 4 compatible plugins compiled for x8664 into Mozilla for another architecture, e.g. x8664. This package...

USN-4054-1 firefox vulnerabilities

A sandbox escape was discovered in Firefox. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. CVE-2019-9811 Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted...

Cybozu Office Browsing Restriction Bypass Vulnerability (CNVD-2018-15528)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A browsing restriction bypass vulnerability exists in Cybozu Office versions 10.0.0 through 10.8.0. An attacker can use this vulnerability to bypass authentication and gain unauthorized access to schedules...

DEBIAN-CVE-2017-7142

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...

Apple Safari WebKit Storage Information Disclosure Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. An information disclosure vulnerability exists in the WebKit Storage component in Apple Safari versions prior to 11. An attacker can exploit this vulnerability...

CVE-2017-7142: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...

PT-2017-17537

Name of the Vulnerable Software and Affected Versions Safari versions prior to 11 Description The issue involves the WebKit Storage component and allows attackers to bypass the Safari Private Browsing protection mechanism, obtaining sensitive information about visited web sites. Recommendations F...

CVE-2016-5176

Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors...

chromium-browser: SafeBrowsing protection mechanism bypass

Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors...

CVE-2016-4603

Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior...

PT-2016-6060

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.3 Description The issue allows attackers to bypass the Private Browsing protection mechanism in Safari and obtain sensitive video URL information. This is achieved by leveraging misbehavior in the Safari View...

CVE-2016-4603: Undefined Security Weakness

Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior...

Google Chrome FileSystem API Security Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the FileSystem API of Google Chrome versions prior to 40.0.2214.91. A remote attack exploiting this vulnerability could bypass the SafeBrowsing for Executable Files protection mechanism by creating an .ex...