1066 matches found
PT-2011-4152
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Recommendations For versions prior to 14.0.835.163, update to version 14.0.835.163 or later to...
CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
PT-2011-4125
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.215 Description The issue allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. Recommendations For versions prior to 13.0.782.215, update to version 13.0.782.21...
CVE-2011-2826: Undefined Security Weakness
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
CVE-2011-2993: Undefined Security Weakness
The implementation of digital signatures for JAR files in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, and possibly other products does not prevent calls from unsigned JavaScript code to signed code, which allows remote attackers to bypass the Same Origin Policy and gain privileges vi...
CVE-2011-2986: Exposure of Sensitive Information to an Unauthorized Actor
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...
CVE-2011-2983: Exposure of Sensitive Information to an Unauthorized Actor
Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site,...
CVE-2011-2981: Undefined Security Weakness
The event-management implementation in Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3.1.12, and possibly other products does not properly select the context for script to run in, which allows remote attackers to bypass the Same Origin Policy or execute arbitrary JavaScript...
Mozilla: Private data leakage using RegExp.input
Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products does not properly handle the RegExp.input property, which allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web site,...
PT-2011-4232
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Description The issue concerns the implementation of digital signatures for JAR files, which does not prevent calls from unsigned JavaScript code to signed code. This...
PT-2011-4220
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 SeaMonkey versions 2.x Thunderbird versions 3.x prior to 3.1.12 Description The issue is related to the event-management implementation, which does not properly select the context for script execution...
PT-2011-4225
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data from a different domain b...
PT-2011-4222
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 Thunderbird versions prior to 3.1.12 SeaMonkey versions 1.x and 2.x Description The issue allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web...
CVE-2011-2139: Undefined Security Weakness
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via...
CentOS Update for firefox CESA-2010:0782 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for thunderbird CESA-2010:0545 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-2819
Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...
CVE-2011-2819: Undefined Security Weakness
Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI...
CVE-2011-2805: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors...