1066 matches found
CVE-2013-2881
Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...
PT-2013-4001
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.95 Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of frames. Recommendations For versions prior to 28.0.1500.95, update ...
CVE-2013-2881: Undefined Security Weakness
Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...
Adobe Air Multiple Vulnerabilities June-2012 (Mac OS X)
This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnjun12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Air Multiple Vulnerabilities June-2012 Mac OS X Authors: Thanga Prakash S Copyright: Copyright c 2013 Greenbo...
CVE-2013-2205: Improper Neutralization of Input During Web Page Generation
The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security.allowDomain setting, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...
CVE-2013-1693: Undefined Security Weakness
The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to read pixel values, and possibly bypass the Same Origin Policy and read text from a different domain, by...
PT-2013-3326
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 22.0 Firefox ESR 17.x versions prior to 17.0.7 Thunderbird versions prior to 17.0.7 Thunderbird ESR 17.x versions prior to 17.0.7 Description The issue allows remote attackers to read pixel values and possibly...
CVE-2013-2859: Undefined Security Weakness
Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors...
PT-2013-3980
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 27.0.1453.110 Description The issue allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution. Recommendations For versions prior to 27.0.1453.110, update to version 27.0.1453.110 ...
CVE-2013-0795: Undefined Security Weakness
The System Only Wrapper SOW implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use of the cloneNode method for cloning a protected node, which allows remote...
PT-2013-2622
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 20.0 Firefox ESR 17.x versions prior to 17.0.5 Thunderbird versions prior to 17.0.5 Thunderbird ESR 17.x versions prior to 17.0.5 SeaMonkey versions prior to 2.17 Description The issue allows remote attackers ...
CVE-2012-2292: Undefined Security Weakness
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2012-5146
Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL...
Mozilla SeaMonkey 2.x <= 2.14 Multiple Vulnerabilities
Binary data 801376.prm...
Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities
Binary data 801345.prm...
CVE-2012-5146: Undefined Security Weakness
Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL...
Mozilla Thunderbird < 17.0.2 Multiple Vulnerabilities
Binary data 6669.prm...
Firefox < 18.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 18.0 and thus, is potentially affected by the following security issues : - Multiple unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. CVE-2012-5829, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763,...
Thunderbird < 17.0.2 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird is earlier than 17.0.2 and thus, is potentially affected by the following security issues : - Two intermediate certificates were improperly issued by TURKTRUST certificate authority. CVE-2013-0743 - A use-after-free error exists related to displaying HTML tabl...
FreeBSD : chromium -- multiple vulnerabilities (46bd747b-5b84-11e2-b06d-00262d5ed8ee)
Google Chrome Releases reports : 162494 High CVE-2012-5145: Use-after-free in SVG layout. Credit to Atte Kettunen of OUSPG. 165622 High CVE-2012-5146: Same origin policy bypass with malformed URL. Credit to Erling A Ellingsen and Subodh Iyengar, both of Facebook. 165864 High CVE-2012-5147:...