PT-2015-7474

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0.2 Description The issue concerns the implementation of the fetch API in Mozilla Firefox, where access to the HTTP response body is not properly restricted in certain situations. This occurs when user...

PT-2015-2417

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.252 Adobe Flash Player versions 19.x prior to 19.0.0.207 Adobe Flash Player versions prior to 11.2.202.535 on Linux Adobe AIR versions prior to 19.0.0.213 Adobe AIR SDK versions prior to 19.0.0.213...

CVE-2015-7628: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain...

flashplugin: multiple issues

CVE-2015-5569 information leak, insufficient hardening These updates include a defense-in-depth feature in the Flash broker API. - CVE-2015-7625 CVE-2015-7626 CVE-2015-7627 CVE-2015-7630 CVE-2015-7633 CVE-2015-7634 arbitrary code execution These updates resolve memory corruption vulnerabilities...

CVE-2015-1304

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...

CVE-2015-1304: Improper Access Control

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a 1 observe or 2 getNotifier call...

CVE-2015-1303: Improper Input Validation

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME...

PT-2015-7344

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The DOM implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This issue is a different vulnerability tha...

PT-2015-7343

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing. This is due to a problem in the...

PT-2015-2723

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.86 Description The issue exists due to insufficient input validation in the PDF viewer component of Google Chrome. This allows a remote attacker to bypass existing access restrictions or load a plugin ...

Google Chrome < 43.0.2357.132 Multiple Vulnerabilities

Binary data 8881.pasl...

PT-2015-2317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.101 Opera affected versions not specified Description The issue exists due to insufficient input validation in the Blink component of Google Chrome. Exploitation can allow a remote attacker to bypass...

PT-2015-2318

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.101 Opera affected versions not specified Description The issue is related to insufficient access control in the Google V8 component of Google Chrome, allowing remote attackers to bypass the Same Origi...

PT-2015-2394

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera affected versions not specified Description The issue is related to the ContainerNode::parserInsertBefore function in Blink, which allows remote attackers to bypass the Same Origin Policy via...

CVE-2015-6679: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to bypass the Same Origin Policy and obtain sensitive...

Adobe AIR <= 18.0.0.199 Multiple Vulnerabilities (APSB15-23)

The version of Adobe AIR installed on the remote Windows host is equal or prior to version 18.0.0.199. It is, therefore, affected by multiple vulnerabilities : - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. CVE-2015-5567, CVE-2015-5579 - A...

PT-2015-2185

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.241 Adobe Flash Player versions 19.x prior to 19.0.0.185 Adobe Flash Player versions prior to 11.2.202.521 on Linux Adobe AIR versions prior to 19.0.0.190 Adobe AIR SDK versions prior to 19.0.0.190...

PT-2015-2084

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which has inadequate access control. This allows remote attackers to bypass the Same Origin Policy by creating a crafted web site. The problem...

PT-2015-2137

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit Canvas implementation, which lacks protection of service data. This can be exploited by a remote attacker to bypass the Same Origin Policy and gain access to sensitiv...

PT-2015-2085

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a lack of protection for internal data in the WebKit component of the iOS operating system. This can be exploited by a remote attacker to bypass existing access restriction rule...