7101 matches found
PT-2011-2149
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue in WebKit allows remote attackers to bypass the Same Origin Policy and force the upload of arbitrary local files from a client computer via a crafted web site. Recommendations For...
PT-2011-2148
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue concerns the HTML5 drag and drop functionality in WebKit, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information. This is achieve...
PT-2011-2935
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Recommendations For versions prior to 10.0.648.127, update to version 10.0.648.127 or later to...
PT-2011-2143
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 iOS versions prior to 4.3 Description The issue allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets CSS token sequences via a crafted web site, due to improper handlin...
CVE-2011-1193: Undefined Security Weakness
Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-0169: Improper Neutralization of Input During Web Page Generation
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...
CVE-2011-1187: Exposure of Sensitive Information to an Unauthorized Actor
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
Debian DSA-2188-1 : webkit - several vulnerabilities
Several vulnerabilities have been discovered in WebKit, a Web content engine library for GTK+. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1783 WebKit does not properly handle dynamic modification of a text node, which allows remote attackers to...
UBUNTU-CVE-2011-1187
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
CVE-2011-1187
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."...
DSA-2188-1 webkit - several
Bulletin has no description...
PT-2011-2932
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak" in the Web Workers implementation. Recommendations For...
PT-2011-2929
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak." Recommendations For versions prior to 10.0.648.127, update...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
Binary data 800960.prm...
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure source: https://www.securityfocus.com/bid/46816/info WebKit is prone to a cross-domain scripting vulnerability because it fails to properly enforce the same-origin policy. Successfully exploiting this issue will allow attackers to...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
Binary data 5812.pasl...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 10.0.648.127. Such versions are reportedly affected by multiple vulnerabilities : - It may be possible to navigate or close the top location in a sandboxed frame. Issue 42574, 42765 - A cross-origin error message leak exist...
FreeBSD Ports: webkit-gtk2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian DSA-2166-1 : chromium-browser - several vulnerabilities
Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0777 Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly ha...
