CVE-2014-4460

CVE-2014-4460 affects CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1. The root issue is that private-browsing transitions do not properly clear the browsing cache, enabling physically proximate attackers to read cached data. The vulnerability is tracked publicly with a low CVSS score...

Safari issue in handling application cache

Overview Safari contains an issue in the handling of application cache where contents that were cached when the private browsing function is turned off may be used after the private browsing function is turned on. Yosuke HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC...

JVN#45442753: Safari issue in handling application cache

Safari contains an issue in the handling of application cache where contents that were cached when the private browsing function is turned off may be used after the private browsing function is turned on. Impact After a website is visited when the private browsing function is turned off and the...

CVE-2014-4409

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

Design/Logic Flaw

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

CVE-2014-4409

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

Mac OS X : Apple Safari < 6.2 / 7.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.2 or 7.1. It is, therefore, affected by the following vulnerabilities : - An error exists related to saved passwords and the incorrect automatic filling of HTML forms. A remote attacker can exploit this to...

CVE-2013-5130

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files...

Design/Logic Flaw

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files...

CVE-2013-5130

CVE-2013-5130 affects Apple Safari/WebKit prior to version 6.1 (Windows and Mac OS X platforms). The flaw occurs when the Web Inspector is launched, which disables Private Browsing, allowing context-dependent attackers to potentially obtain browsing information by leveraging LocalStorage/files. T...

CVE-2013-5130

WebKit in Apple Safari before 6.1 disables the Private Browsing feature upon a launch of the Web Inspector, which makes it easier for context-dependent attackers to obtain browsing information by leveraging LocalStorage/ files...

Mac OS X : Apple Safari < 6.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.1. It is, therefore, potentially affected by several issues : - A bounds-checking issue exists related to handling XML files. CVE-2013-1036 - Multiple memory corruption vulnerabilities exist in WebKit...

CVE-2013-0982

The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation...

CVE-2013-0982

CVE-2013-0982 concerns the Private Browsing feature in CFNetwork on macOS OS X versions prior to 10.8.4. The issue: permanent cookies can be stored after quitting Safari, potentially allowing a physically proximate attacker with an unattended workstation to bypass cookie-based authentication. Aff...

CVE-2013-0982

The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation...

Firefox 20 Fixes 11 Critical Flaws, Adds Per-Tab Private Browsing

Mozilla has added a new privacy feature to Firefox that enables users to begin a new private browsing session in a separate tab while still running a normal session in other tabs. Firefox 20 also includes patches for 11 critical security vulnerabilities. The new version of Firefox expands the...

Fedora 18 : firefox-19.0-1.fc18 / thunderbird-17.0.3-1.fc18 / xulrunner-19.0-1.fc18 (2013-2794)

Built-in PDF viewer - Canvas elements can export their content as an image blob using canvas.toBlob - Startup performance improvements bugs 715402 and 756313 - Debugger now supports pausing on exceptions and hiding non-enumerable properties - Remote Web Console is available for connecting to...

CVE-2011-2486

Summary: CVE-2011-2486 affects nspluginwrapper prior to 1.4.4. The flaw lies in incorrect handling of NPNVprivateModeBool, which can prevent Firefox plugins from correctly determining Private Browsing state, enabling remote attackers to bypass access restrictions (as demonstrated with Flash). Imp...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CentOS Update for nspluginwrapper CESA-2012:1459 centos6

Check for the Version of nspluginwrapper OpenVAS Vulnerability Test CentOS Update for nspluginwrapper CESA-2012:1459 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...