CVE-2011-2819

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...

CVE-2011-2805

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors...

CVE-2011-2819

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...

CVE-2011-2805

CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...

CVE-2011-2819

CVE-2011-2819 is referenced in connected OpenVAS entries as a WebKit/WebKit-based cross-origin vulnerability describing a cross-origin issue in the handling of the beforeload event. The initial description refers to a Chrome-based SOP bypass via base URI, but the connected documents ground this C...

CVE-2011-2805

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors...

CVE-2011-2819

Removed by vendor...

CVE-2011-2805

Removed by vendor...

CVE-2011-2819

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...

CVE-2011-2819: Undefined Security Weakness

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...

CVE-2011-2805: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors...

PT-2011-4119

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI. Recommendations For versions prior to 13.0.782.107, update to version...

PT-2011-4108

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks. Recommendations For versions prior to 13.0.782.107, update to version 13.0.782.10...

CVE-2011-0219

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

Design/Logic Flaw

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

CVE-2011-0219

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

CVE-2011-0219

CVE-2011-0219 affects Apple Safari prior to 5.0.6, where a Java applet loading fonts can bypass the Same Origin Policy and alter the rendering of text from arbitrary websites. The issue is described in the Apple advisory as part of Safari’s vulnerabilities fixed by Safari 5.0.6 and in later 5.1 u...

PT-2011-2198

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description The issue allows remote attackers to bypass the Same Origin Policy and modify the rendering of text from arbitrary web sites via a Java applet that loads fonts. Recommendations For versions prio...

CVE-2011-0219: Undefined Security Weakness

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts...

Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1150-1)

Multiple memory vulnerabilities were discovered in the browser rendering engine. An attacker could use these to possibly execute arbitrary code with the privileges of the user invoking Thunderbird. CVE-2011-2364, CVE-2011-2365, CVE-2011-2374, CVE-2011-2376 Martin Barbella discovered that under...