Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the Same Origin Policy for an IP address origin, and conduct cross-site scripting XSS attacks, by appending whitespace characters to an IP address string...

Google Chrome Denial of Service Vulnerability (CNVD-2015-02648)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 42.0.2311.90. A remote attacker could exploit this vulnerability to cause a denial of service or have other impact...