CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1268

bindings/scripts/v8types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL...

CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1267

CVE-2015-1267 affects Blink in Google Chrome prior to 43.0.2357.130, where the creation context for a DOM wrapper was not properly restricted, enabling remote attackers to bypass the Same Origin Policy via crafted JavaScript using Blink public APIs (e.g., WebArrayBufferConverter.cpp, WebBlob.cpp,...

CVE-2015-1268

CVE-2015-1268 refers to Blink via bindings/scripts/v8_types.py in Chrome before 43.0.2357.130, where the creation context for a return value’s DOM wrapper was not correctly selected, enabling a remote attacker to bypass the Same Origin Policy through crafted JavaScript (e.g., data: URLs). Connect...

CVE-2015-1267

Removed by vendor...

CVE-2015-1268

Removed by vendor...

UBUNTU-CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1267

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1268

bindings/scripts/v8types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL...

CVE-2015-1267: Undefined Security Weakness

Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp,...

CVE-2015-1268: Undefined Security Weakness

bindings/scripts/v8types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL...

UBUNTU-CVE-2015-1268

bindings/scripts/v8types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL...

chromium-browser: Cross-origin bypass in Blink

bindings/scripts/v8types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL...

PT-2015-1423

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.130 Opera affected versions not specified Description The issue is related to the bindings/scripts/v8 types.py file in Blink, which does not properly select a creation context for a return value's DOM...

PT-2015-1422

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.130 Description The issue is related to errors in security settings of the Blink component in Google Chrome, allowing a remote attacker to bypass access restrictions using JavaScript that utilizes the...

Google Chrome < 43.0.2357.65 Multiple Vulnerabilities

Binary data 8782.pasl...

Google Chrome < 43.0.2357.124 Multiple Vulnerabilities

Binary data 8783.pasl...

CSRF Vulnerability in jquery-rails

In the scenario where an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag that will trigger a POST action, the attacker can set the href or action to " https://attacker.com" note the leading space that will be passed to JQuery, who will s...

CSRF Vulnerability in jquery-ujs

In the scenario where an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag that will trigger a POST action, the attacker can set the href or action to " https://attacker.com" note the leading space that will be passed to JQuery, who will s...