CVE-2011-1190: Exposure of Sensitive Information to an Unauthorized Actor

The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

CVE-2011-1187: Exposure of Sensitive Information to an Unauthorized Actor

Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...

PT-2011-2149

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue in WebKit allows remote attackers to bypass the Same Origin Policy and force the upload of arbitrary local files from a client computer via a crafted web site. Recommendations For...

PT-2011-2151

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site, when the Web Inspector is used. This is due ...

PT-2011-2143

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 iOS versions prior to 4.3 Description The issue allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets CSS token sequences via a crafted web site, due to improper handlin...

CVE-2011-1193: Undefined Security Weakness

Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-0169: Improper Neutralization of Input During Web Page Generation

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...

CVE-2011-0167: Undefined Security Weakness

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site...

PT-2011-2148

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue concerns the HTML5 drag and drop functionality in WebKit, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information. This is achieve...

CVE-2011-0166: Undefined Security Weakness

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...

PT-2011-2932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak" in the Web Workers implementation. Recommendations For...

PT-2011-2929

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak." Recommendations For versions prior to 10.0.648.127, update...

Google Chrome < 10.0.648.127 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 10.0.648.127. Such versions are reportedly affected by multiple vulnerabilities : - It may be possible to navigate or close the top location in a sandboxed frame. Issue 42574, 42765 - A cross-origin error message leak exist...

Google Chrome < 10.0.648.127 Multiple Vulnerabilities

Binary data 800960.prm...

CVE-2011-0778

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-0778: Undefined Security Weakness

Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2011-2627

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.84 Description The issue is related to the improper restriction of drag and drop operations, potentially allowing remote attackers to bypass the Same Origin Policy. Recommendations For versions prior to...

Moderate: Red Hat Security Advisory: webkitgtk security update

Updated webkitgtk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

CVE-2010-4483

Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site...

PT-2010-5493

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 8.0.552.215 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site, due to improper restriction of read access to videos...