CVE-2012-3689

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2012-3691

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets CSS property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2012-3689

CVE-2012-3689 affects WebKit in Apple Safari prior to 6.0. The issue arises from improper handling of drag-and-drop events, which can allow user‑assisted remote attackers to bypass the Same Origin Policy via a crafted web site. The available connected sources confirm the affected software (Apple ...

CVE-2012-3691

CVE-2012-3691 affects WebKit-based Safari on iOS (and Safari on macOS) where WebKit’s handling of CSS property values caused a cross-origin issue that could bypass the Same Origin Policy when visiting a crafted site. The vulnerability enables cross-origin information exposure due to improper orig...

CVE-2012-3689: Improper Input Validation

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site...

PT-2012-4932

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of Cascading Style Sheets CSS property values. Recommendations For versions prio...

PT-2012-4930

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description The issue allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of drag-and-drop events by WebKit in Apple Safari. Recommendations...

CVE-2012-3691: Improper Input Validation

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets CSS property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

RedHat Update for icedtea-web RHSA-2011:1441-01

Check for the Version of icedtea-web OpenVAS Vulnerability Test RedHat Update for icedtea-web RHSA-2011:1441-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for icedtea-web RHSA-2011:1441-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for thunderbird RHSA-2012:0080-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

GLSA-201206-03 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-03 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

GLSA-201204-03 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201204-03 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact : A remote attacker could entice a us...

Adobe Flash Player Multiple Vulnerabilities June-2012 (Linux)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnjun12lin.nasl 5988 2017-04-20 09:02:29Z teissa $ Adobe Flash Player Multiple Vulnerabilities June-2012 Linux Authors: Rachana Shetty Copyright:...

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Flash Player issue in implementations of the Same Origin Policy

Overview Flash Player contains an issue in implementations of the Same Origin Policy. SoundMixer.computeSpectrum method, included in Flash Player, contains an issue in implementations of the Same Origin Policy. Mitsuaki Shiraishi of Symantec Japan, Inc. reported this vulnerability to IPA. JPCERT/...

JVN#38163638: Flash Player issue in implementations of the Same Origin Policy

SoundMixer.computeSpectrum method, included in Flash Player, contains an issue in implementations of the Same Origin Policy. Impact An attacker may obtain sound spectrum data that user playing in violation of the same-origin policy. Solution Update the Software Update to the latest version...

Browser Navigation Download Trick (Chrome / IE / Firefox)

Exploit for multiple platform in category local exploits Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also...

Mozilla Products Security Bypass Vulnerability - May12 (Mac OS X)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to security bypass vulnerability OpenVAS Vulnerability Test $Id: gbmozillaprdtssecbypassvulnmay12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Security Bypass Vulnerability - May12 Mac OS X Authors:...

Mozilla Products Security Bypass Vulnerability - May12 (Windows)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to security bypass vulnerability OpenVAS Vulnerability Test $Id: gbmozillaprdtssecbypassvulnmay12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Security Bypass Vulnerability - May12 Windows Authors: Rachan...