4 matches found
EUVD-2009-2063
Malware in sbrugna...
6.8CVSS6.1AI score0.01369EPSS
SaveExploits1References5
EUVD-2009-2062
Malware in sbrugna...
6.8CVSS6.4AI score0.00999EPSS
SaveExploits1References5
CVE-2016-5132
The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME...
8.8CVSS7.3AI score0.01465EPSS
SaveExploits0References17
CVE-2009-2064
Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe...
6.8CVSS6.9AI score0.04273EPSS
SaveExploits1References4
20