4578 matches found
PT-2011-2982
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8 Description The issue allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site. An attacker could exploit this by constructing a specially...
CVE-2011-1244: Improper Restriction of Rendered UI Layers or Frames
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
Firefox 4 With Content Security Policy Due Tuesday
Firefox 4, the newest version of Mozilla’s flagship browser slated for release today, includes a variety of security and privacy protections, but perhaps the most important of them is the addition of the Content Security Policy. The mechanism, which is enabled by default in Firefox 4, is designed...
FreeBSD Ports: opera, opera-devel, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MediaWiki < 1.16.1 'Frames Processing Clickjacking' Information Disclosure Vulnerability
MediaWiki is prone to a clickjacking information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeBSD : opera -- multiple vulnerabilities (2eda0c54-34ab-11e0-8103-00215c6a37bb)
Opera reports : Opera 11.01 is a recommended upgrade offering security and stability enhancements. The following security vulnerabilities have been fixed : - Removed support for 'javascript:' URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS. - Fixed an issue where...
CVE-2011-0683
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
Code injection
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
CVE-2011-0683
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
CVE-2011-0683
Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....
CVE-2011-0683: Undefined Security Weakness
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
PT-2011-2558
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, due to improper restriction of the use of opera: URLs. Recommendations For Opera versions prior to...
Opera < 11.01 Multiple Vulnerabilities
Binary data 800855.prm...
Opera < 11.01 Multiple Vulnerabilities
Binary data 5747.prm...
Opera < 11.01 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.01. Such versions are potentially affected by the following issues : - The Cascading Style Sheets CSS Extensions for XML implementation recognizes links to javascript: URLs in the -o-link property, which could be abused ...
opera -- multiple vulnerabilities
Opera reports: Opera 11.01 is a recommended upgrade offering security and stability enhancements. The following security vulnerabilities have been fixed: Removed support for "javascript:" URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS. Fixed an issue where large...
Clickjacking attacks may be carried out against internal opera: URLs
Internal opera: URLs which may be used to modify the Opera configuration have some intentional restrictions that are designed to mitigate possible clickjacking attacks. Certain manipulations can trick Opera into bypassing those restrictions, which would then allow clickjacking attacks to be carri...
Clickjacking attacks may be carried out against internal opera: URLs – Opera Security Advisories
Clickjacking attacks may be carried out against internal opera: URLs – Opera Security Advisories OPCOM Team | January 25, 2011 Severity High Description Internal opera: URLs which may be used to modify the Opera configuration have some intentional restrictions that are designed to mitigate possib...
