Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. CVE-2010-1211, CVE-2010-2753, CVE-2010-1214 A memory corruption fl...

PT-2012-4930

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description The issue allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of drag-and-drop events by WebKit in Apple Safari. Recommendations...

CVE-2012-3689: Improper Input Validation

WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2012-3691: Improper Input Validation

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets CSS property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

PT-2012-4932

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0 Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of Cascading Style Sheets CSS property values. Recommendations For versions prio...

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

CVE-2012-2401

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content...

PT-2012-4014

Name of the Vulnerable Software and Affected Versions Plupload versions prior to 1.5.4 WordPress versions prior to 3.3.2 Description The issue allows remote attackers to bypass the Same Origin Policy via crafted content, enabling scripting regardless of the domain from which the SWF content was...

CVE-2012-2401: Undefined Security Weakness

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content...

CVE-2011-3072

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows...

PT-2012-1628

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.151 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements. Recommendations For versions prior to 18.0.1025.151, update to...

CVE-2011-3072: Origin Validation Error

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows...

CVE-2011-3067: Origin Validation Error

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements...

CVE-2012-1926: Exposure of Sensitive Information to an Unauthorized Actor

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the 1 history.pushState and 2 history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information...

PT-2012-3658

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to bypass the Same Origin Policy via the history.pushState and history.replaceState functions in conjunction with cross-domain frames, leading to unintended read acces...

CVE-2011-3056

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

CVE-2011-3056: Origin Validation Error

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

PT-2012-1617

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.83 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe". This could potentially lead to unauthorized access to sensitive information...

PT-2016-1343

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to the PPB Flash MessageLoop Impl::InternalRun function in the Pepper plugin, which mishandles nested message loops. This allows...

PT-2015-2880

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions prior to 38.5 Description The issue allows remote attackers to bypass the Same Origin Policy. This can be achieved via specially crafted data: and view-source: URIs. The...