CVE-2014-1487: Origin Validation Error

The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication information via vectors involving error messages...

CVE-2011-3377: Undefined Security Weakness

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

PT-2014-1139

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 Mozilla Firefox ESR versions 24.x prior to 24.3 Mozilla Thunderbird versions prior to 24.3 Mozilla SeaMonkey versions prior to 2.24 Description The vulnerability is related to errors in the implementation...

PT-2014-1158

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timi...

CVE-2012-2899: Improper Neutralization of Input During Web Page Generation

Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors involving the document.write method...

PT-2013-5458

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.1.1 Apple Safari versions 7.x prior to 7.0.1 Description The issue allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields. Recommendatio...

CVE-2013-5227: Undefined Security Weakness

Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields...

CVE-2013-3908: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information from any visited document via a crafted web page that is not properly handled during a print-preview action, aka "Internet Explorer Information Disclosu...

PT-2013-4732

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 10 Description An information disclosure issue exists in the way Internet Explorer handles specially crafted web content when generating print previews. This could allow an attacker to gather...

CVE-2013-5159: Undefined Security Weakness

WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about use of the window.webkitRequestAnimationFrame API via an IFRAME element...

PT-2013-5404

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about the use of the window.webkitRequestAnimationFrame API via an IFRAME element...

CVE-2013-1727

Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting XSS attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file...

PT-2013-3358

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 24.0 on Android Description The issue allows attackers to bypass the Same Origin Policy, which can lead to cross-site scripting XSS attacks or the unauthorized obtaining of password or cookie information. This...

CVE-2013-1727: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross-site scripting XSS attacks or obtain password or cookie information, by using a symlink in conjunction with a file: URL for a local file...

PT-2013-3346

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 23.0 Firefox ESR 17.x versions prior to 17.0.8 Thunderbird versions prior to 17.0.8 Thunderbird ESR 17.x versions prior to 17.0.8 SeaMonkey versions prior to 2.20 Description The issue allows remote attackers ...

CVE-2013-1714: Undefined Security Weakness

The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not properly restrict XMLHttpRequest calls, which allows remote attackers to bypass the Same Origin Policy a...

CVE-2013-2881

Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

PT-2013-4001

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.95 Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of frames. Recommendations For versions prior to 28.0.1500.95, update ...

CVE-2013-2881: Undefined Security Weakness

Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)

This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnjun12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Air Multiple Vulnerabilities June-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c 2013 Greenbo...