7101 matches found
PT-2011-2151
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site, when the Web Inspector is used. This is due ...
CVE-2011-0166: Undefined Security Weakness
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...
CVE-2011-1193: Undefined Security Weakness
Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-1187: Exposure of Sensitive Information to an Unauthorized Actor
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
CVE-2011-1190: Exposure of Sensitive Information to an Unauthorized Actor
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
PT-2011-2143
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 iOS versions prior to 4.3 Description The issue allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets CSS token sequences via a crafted web site, due to improper handlin...
PT-2011-2148
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue concerns the HTML5 drag and drop functionality in WebKit, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information. This is achieve...
Debian DSA-2188-1 : webkit - several vulnerabilities
Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to...
DSA-2188-1 webkit - several
Bulletin has no description...
UBUNTU-CVE-2011-1187
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
CVE-2011-1187
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
PT-2011-2929
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak." Recommendations For versions prior to 10.0.648.127, update...
PT-2011-2932
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak" in the Web Workers implementation. Recommendations For...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
Binary data 800960.prm...
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure source: https://www.securityfocus.com/bid/46816/info WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy. Successfully exploiting this issue will allow attackers to...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
Binary data 5812.pasl...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 10.0.648.127. Such versions are reportedly affected by multiple vulnerabilities : - It may be possible to navigate or close the top location in a sandboxed frame. Issue 42574, 42765 - A cross-origin error message leak exist...
FreeBSD Ports: webkit-gtk2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian DSA-2166-1 : chromium-browser - several vulnerabilities
Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...
