PT-2012-3658

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to bypass the Same Origin Policy via the history.pushState and history.replaceState functions in conjunction with cross-domain frames, leading to unintended read acces...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

Design/Logic Flaw

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2011-3056

Removed by vendor...

CVE-2011-3056: Origin Validation Error

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

PT-2012-1617

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.83 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe". This could potentially lead to unauthorized access to sensitive information...

Debian Security Advisory DSA 2420-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory DSA 2420-1. OpenVAS Vulnerability Test $Id: deb24201.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2420-1 openjdk-6 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2420-1 : openjdk-6 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. - CVE-2011-3377 The IcedTea browser plugin included in the openjdk-6 package does not properly enforce the Same Origin Policy on web content served under a domain name which has a common suffix...

GLSA-201202-01 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201202-01 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact : A remote attacker could entice a us...

PT-2016-1343

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to the PPB Flash MessageLoop Impl::InternalRun function in the Pepper plugin, which mishandles nested message loops. This allows...

PT-2015-2880

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions prior to 38.5 Description The issue allows remote attackers to bypass the Same Origin Policy. This can be achieved via specially crafted data: and view-source: URIs. The...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. VID a4a809d8-25c8-11e1-b531-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID a4a809d8-25c8-11e1-b531-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 6c8ad3e8-0a30-11e1-9580-4061862b8c22 OpenVAS Vulnerability Test $ Description: Auto generated from VID 6c8ad3e8-0a30-11e1-9580-4061862b8c22 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...