PT-2015-1040

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 37.0 Firefox ESR versions 31.x prior to 31.6 Thunderbird versions prior to 31.6 Description The issue is related to the incorrect restriction of resource: URLs, allowing a remote attacker to execute arbitrary...

Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net

A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...

CVE-2015-0818: Undefined Security Weakness

Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation...

PT-2015-4887

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0.4 Firefox ESR versions prior to 31.5.3 SeaMonkey versions prior to 2.33.1 Description The issue allows remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome...

CVE-2015-0337: Undefined Security Weakness

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2015-4572

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.277 Adobe Flash Player versions 14.x through 17.x before 17.0.0.134 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.451 on Linux Description The issue allows remote attackers to...

Google Chrome < 40.0.2214.91 Multiple Vulnerabilities

Binary data 8889.pasl...

CVE-2015-0072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a...

PT-2015-4446

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description The issue allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML. This is achieved through vectors involving an IFRAME element that trigger...

PT-2015-5165

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.111 Google Chrome on Android versions prior to 40.0.2214.109 Opera affected versions not specified Description The issue arises from the V8ThrowException::createDOMException function in the V8 bindings...

CVE-2015-1210: Undefined Security Weakness

The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the...

CVE-2014-7939

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header...

CVE-2014-7939: Undefined Security Weakness

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header...

PT-2015-3972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description The issue allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an...

CVE-2014-8453: Undefined Security Weakness

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2014-0580: Undefined Security Weakness

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2014-8534

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x before 10.1.13 Adobe Reader and Acrobat versions 11.x before 11.0.10 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Recommendations For Adobe Reade...

CVE-2014-4465: Improper Input Validation

WebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1 allows remote attackers to bypass the Same Origin Policy via crafted Cascading Style Sheets CSS token sequences within an SVG file in the SRC attribute of an IMG element...

PT-2014-5924

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.1 Apple Safari versions 7.x prior to 7.1.1 Apple Safari versions 8.x prior to 8.0.1 Description The issue allows remote attackers to bypass the Same Origin Policy. This is achieved through crafted Cascading...

PT-2014-3684

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.259 Adobe Flash Player versions 14.x through 16.x before 16.0.0.235 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.425 on Linux Description The issue allows remote attackers to...