CVE-2016-5291: Improper Input Validation

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...

PT-2018-4727

Name of the Vulnerable Software and Affected Versions Sails versions 0.12.7 and lower Description The issue concerns the CORS configuration in Sails, where the value of the origin header is reflected as the value for the Access-Control-Allow-Origin header. This allows an attacker to make AJAX...

CVE-2016-10549: Improper Access Control

Sails is an MVC style framework for building realtime web applications. Version 0.12.7 and lower have an issue with the CORS configuration where the value of the origin header is reflected as the value for the Access-Control-Allow-Origin header. This would allow an attacker to make AJAX requests ...

PT-2018-3257

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue is related to insufficient data validation in the HTML parser, allowing a remote attacker to bypass the same origin policy. This can be achieved via a crafted HTML page,...

[ASA-201805-10] firefox: multiple issues

Arch Linux Security Advisory ASA-201805-10 ========================================== Severity: Critical Date : 2018-05-13 CVE-ID : CVE-2018-5150 CVE-2018-5151 CVE-2018-5152 CVE-2018-5153 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5160 CVE-2018-5163 CVE-2018-51...

RHEL 6 : chromium-browser (RHSA-2018:1195)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1195 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 66.0.3359.117. Security Fixes:...

PT-2018-3221

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3 Safari versions prior to 11.1 iCloud versions prior to 7.4 on Windows iTunes versions prior to 12.7.4 on Windows watchOS versions prior to 4.3 Description The issue involves the fetch API in the WebKit component,...

PT-2018-7111

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 10.3 Apple Safari versions prior to 10.1 Apple iCloud versions prior to 6.2 on Windows Apple tvOS versions prior to 10.2 Description: The issue involves the WebKit component and allows remote attackers to bypass th...

CVE-2017-2493: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2018-4117: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It...

Code injection

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

Design/Logic Flaw

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5327

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5326

CVE-2018-5326 affects Cheetah Mobile CM Browser 5.22.06.0012 on older Android platforms, described as a Same Origin Policy bypass . External documents confirm the vulnerability exists in this specific version, enabling cross-origin policy circumvention. The CVSS data provided indicates a network-...

CVE-2018-5327

CVE-2018-5327 affects Cheetah Mobile Armorfly Browser & Downloader (version 1.1.05.0010) on older Android platforms, where a flaw allows bypass of the Same-Origin Policy. The connected CNVD/NVD records describe a security bypass vulnerability enabling cross-origin access, but do not specify exact...

PT-2018-16895

Name of the Vulnerable Software and Affected Versions Cheetah Mobile CM Browser version 5.22.06.0012 Description The issue allows for Same Origin Policy Bypass when Cheetah Mobile CM Browser is installed on older Android platforms. Recommendations For version 5.22.06.0012, consider updating to a...

PT-2018-16896

Name of the Vulnerable Software and Affected Versions Cheetah Mobile Armorfly Browser & Downloader version 1.1.05.0010 Description The issue allows for Same Origin Policy Bypass when the Cheetah Mobile Armorfly Browser & Downloader is installed on older Android platforms. Recommendations For...

CVE-2018-5326: Undefined Security Weakness

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5327: Undefined Security Weakness

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2017-18016

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine reusing the current website's token, which is not bound to an origin...