9955 matches found
Mozilla Firefox < 41.0 Multiple Vulnerabilities
Binary data 8948.prm...
chromium: cross-origin bypass
CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. - CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski...
Mozilla Firefox and Firefox ESR CORS Preflight Protection Mechanism Bypass Vulnerability
Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox that allows an attacker to bypass the CORS pre-check protection mechanism by generating a duplicate cache-key and retrieving the value in a failed HTTP Access-Control- response header...
Google Chrome OS < 43.0.2357.125 Multiple Vulnerabilities
Binary data 8887.prm...
Google Chrome < 43.0.2357.130 Multiple Vulnerabilities
Binary data 8880.pasl...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: Two vulnerabilities were fixed in this release: 530301 High CVE-2015-1303: Cross-origin bypass in DOM. Credit to Mariusz Mlynski. 531891 High CVE-2015-1304: Cross-origin bypass in V8. Credit to Mariusz Mlynski...
Updated firefox packages fix security vulnerabilities
Updated firefox packages fix security vulnerabilities: Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox that could cause memory corruption and crashes or potentially allow for arbitrary code execution CVE-2015-4500. Using the...
MGASA-2015-0382 Updated firefox packages fix security vulnerabilities
Updated firefox packages fix security vulnerabilities: Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox that could cause memory corruption and crashes or potentially allow for arbitrary code execution CVE-2015-4500. Using the...
Mozilla: Errors in the handling of CORS preflight request headers (MFSA 2015-111)
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of a value from an incorrect HTTP Access-Control- response header...
openSUSE Security Update : Chromium (openSUSE-2015-595)
Chromium was updated to the 45.0.2454.85 of the stable channel to fix multiple security issues. The following vulnerabilities were fixed : - CVE-2015-1291: Cross-origin bypass in DOM - CVE-2015-1292: Cross-origin bypass in ServiceWorker - CVE-2015-1293: Cross-origin bypass in DOM - CVE-2015-1294:...
UBUNTU-CVE-2015-4520
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of a value from an incorrect HTTP Access-Control- response header...
Google Chrome < 45.0.2454.85 Multiple Vulnerabilities
Binary data 8854.pasl...
Debian DSA-3351-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1291 A cross-origin bypass issue was discovered in DOM. - CVE-2015-1292 Mariusz Mlynski discovered a cross-origin bypass issue in ServiceWorker. - CVE-2015-1293 Mariusz Mlynski discovered a cross-origin bypass...
[SECURITY] [DSA 3351-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3351-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 03, 2015 https://www.debian.org/security/faq -...
chromium-browser: Cross-origin bypass in DOM
The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service DOM tree corruption via a web...
chromium-browser: Cross-origin bypass in DOM
The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
chromium-browser: Cross-origin bypass in ServiceWorker
The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker...
Debian Security Advisory DSA 3351-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1291 A cross-origin bypass issue was discovered in DOM. CVE-2015-1292 Mariusz Mlynski discovered a cross-origin bypass issue in ServiceWorker. CVE-2015-1293 Mariusz Mlynski discovered a cross-origin bypass issue in...
FreeBSD : chromium -- multiple vulnerabilities (a9350df8-5157-11e5-b5c1-e8e0b747a45a)
Google Chrome Releases reports : 29 security fixes in this release, including : - 516377 High CVE-2015-1291: Cross-origin bypass in DOM. Credit to anonymous. - 522791 High CVE-2015-1292: Cross-origin bypass in ServiceWorker. Credit to Mariusz Mlynski. - 524074 High CVE-2015-1293: Cross-origin...