CVE-2013-0982

The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation...

CVE-2013-0982

CVE-2013-0982 concerns the Private Browsing feature in CFNetwork on macOS OS X versions prior to 10.8.4. The issue: permanent cookies can be stored after quitting Safari, potentially allowing a physically proximate attacker with an unattended workstation to bypass cookie-based authentication. Aff...

PT-2013-2774

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.8.4 Description The issue concerns the Private Browsing feature in CFNetwork, which fails to prevent the storage of permanent cookies when exiting Safari. This could allow physically proximate attackers to bypass...

Firefox 20 Fixes 11 Critical Flaws, Adds Per-Tab Private Browsing

Mozilla has added a new privacy feature to Firefox that enables users to begin a new private browsing session in a separate tab while still running a normal session in other tabs. Firefox 20 also includes patches for 11 critical security vulnerabilities. The new version of Firefox expands the...

Fedora 18 : firefox-19.0-1.fc18 / thunderbird-17.0.3-1.fc18 / xulrunner-19.0-1.fc18 (2013-2794)

Built-in PDF viewer - Canvas elements can export their content as an image blob using canvas.toBlob - Startup performance improvements bugs 715402 and 756313 - Debugger now supports pausing on exceptions and hiding non-enumerable properties - Remote Web Console is available for connecting to...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CVE-2011-2486

Summary: CVE-2011-2486 affects nspluginwrapper prior to 1.4.4. The flaw lies in incorrect handling of NPNVprivateModeBool, which can prevent Firefox plugins from correctly determining Private Browsing state, enabling remote attackers to bypass access restrictions (as demonstrated with Flash). Imp...

CVE-2011-2486: Undefined Security Weakness

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CentOS Update for nspluginwrapper CESA-2012:1459 centos6

Check for the Version of nspluginwrapper OpenVAS Vulnerability Test CentOS Update for nspluginwrapper CESA-2012:1459 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for nspluginwrapper RHSA-2012:1459-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

nspluginwrapper security update

CentOS Errata and Security Advisory CESA-2012:1459 Updated nspluginwrapper packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring Syst...

nspluginwrapper: NPNVprivateModeBool variable not forwarded

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

Low: Red Hat Security Advisory: nspluginwrapper security and bug fix update

Updated nspluginwrapper packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

USN-1548-2: Firefox regression

USN-1548-1 fixed vulnerabilities in Firefox. The new package caused a regression in Private Browsing which could leak sites visited to the browser cache. This update fixes the problem. Original advisory details: Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherlan...

Apple Safari Multiple Vulnerabilities (Oct 2011) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.1.4 Multiple Vulnerabilities

Binary data 6346.prm...

Safari < 5.1.4 Multiple Vulnerabilities

Binary data 800987.prm...

Safari < 5.1.4 Multiple Vulnerabilities

The version of Safari installed on the remote host reportedly is affected by several issues : - Look-alike characters in a URL could be used to masquerade a website. CVE-2012-0584 - Web page visits may be recorded in browser history even when private browsing is active. CVE-2012-0585 - Multiple...

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the 1 pushState or 2 replaceState method...