8811 matches found
CVE-2012-4908
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
Design/Logic Flaw
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
CVE-2012-4908
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
CVE-2012-4908
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
CVE-2012-4908
CVE-2012-4908 affects Google Chrome for Android, where the Same-Origin Policy for local file access (file:) can be bypassed via symbolic links. The vulnerability enables a remote attacker to access Chrome’s private local files (e.g., cookies, bookmarks) by tricking a loaded file: URL with a symli...
CVE-2012-4908
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
Google Updates Chrome for Android, Fixes Several Vulnerabilities
Google has issued a security update for its Chrome operating system on Android devices, resolving seven medium-risk vulnerabilities and paying out a total of $3,500 in rewards to two researchers. On the Google Chrome Blog, software engineer Jay Civelli wrote that the update strengthens Chrome for...
CVE-2012-4908: Undefined Security Weakness
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink...
PT-2012-5654
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025308 on Android Description The issue allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink. Recommendations For Google Chrome versions...
Google Chrome for Android - Same-origin Policy Bypass Local Symlink
Google Chrome for Android - Same-origin Policy Bypass Local Symlink source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially...
Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting
Google Chrome for Android - com.android.browser.applicationid Intent Extra Data Cross-Site Scripting source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of...
Google Chrome for Android - Same-origin Policy Bypass Local Symlink
source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal...
Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting
source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the context of the browser, obtain potentially sensitive information, bypass the same-origin policy, and steal...
Sitecom Home Storage Center - Authentication Bypass
Sitecom Home Storage Center - Authentication Bypass Security Advisory AA-006: Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012...
Sitecom Home Storage Center Authorization Bypass
Exploit for php platform in category web applications Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012 Vulnerability Type=...
Conceptronic Grab'n'Go Authorization Bypass
Exploit for php platform in category web applications Authorization Bypass Vulnerability in Password Reset Function Conceptronic Grab’n’Go Network Storage 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012 Vulnerability...
Conceptronic Grab'n'Go Authorization Bypass
Security Advisory AA-005: Authorization Bypass Vulnerability in Password Reset Function Conceptronic Grab’n’Go Network Storage 0-day Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 6, 2012 Vulnerability Type= Authorization Bypass...
Sitecom Home Storage Center Directory Traversal
Exploit for hardware platform in category web applications Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= -...
Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in the way Firefox handled malformed JPEG images. A website containing a malicious JPEG image could cause Firefox to crash or, potentially, execute arbitrary code wi...
Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64
Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...