PT-2016-2162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the improper use of prototypes in the extensions/renderer/resources/binding.js component of the extension bindings. This...

PT-2016-2165

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This is related to errors in the code of the Blink...

PT-2016-2163

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, relate...

PT-2016-2146

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Description The issue is related to errors in controlling access to CSS styles, allowing remote attackers to bypass the Same Origin Policy via a crafted web site. This can be achieved by exploiting...

PT-2016-2166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the ModuleSystem::RequireForJsInner function in the extension bindings, which mishandles properties. This allows remote...

PT-2016-2164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to errors in the code of the extensions subsystem, allowing a remote attacker to bypass the existing access restriction policy,...

CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

DEBIAN-CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

UBUNTU-CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

Cross site scripting

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

CVE-2016-4566

Cross-site scripting XSS vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution SOME attack...

CVE-2016-4566

The CVE-2016-4566 entry concerns a cross-site scripting (XSS) vulnerability in plupload.flash.swf (Plupload before 2.1.9) used by WordPress before 4.5.2. The flaw allows remote attackers to inject arbitrary script or HTML via a Same-Origin Method Execution (SOME) attack. Public details from conne...

PT-2016-6026

Name of the Vulnerable Software and Affected Versions Plupload versions prior to 2.1.9 WordPress versions prior to 4.5.2 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method...

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2960-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2960-1 advisory. An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potential...

WordPress Same Origin Method Execution Vulnerability (May 2016) - Windows

WordPress is prone to same origin method execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Same Origin Method Execution Vulnerability (May 2016) - Linux

WordPress is prone to same origin method execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

USN-2960-1 oxide-qt vulnerabilities

An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code. CVE-2016-1660 It was discovered that Blink assumes that a frame...

MGASA-2016-0183 Updated chromium-browser-stable packages fix security vulnerability

Chromium-browser-stable 50.0.2661.102 fixes several security issues: same origin bypass vulnerabilities in DOM CVE-2016-1667 and the Blink V8 bindings CVE-2016-1668, a buffer overflow in V8 CVE-2016-1669, and a race condition in the loader CVE-2016-1670...