10676 matches found
PT-2018-8425
Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 54 Description A security issue exists where Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs. This allows for the reading of local dat...
Microsoft Edge Security Bypass Vulnerability (CNVD-2017-14644)
Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly apply the same-origin policy to HTML elements within other browsers and is vulnerable to a remote security feature bypass vulnerability in its implementation. An attacker could exploit the...
CVE-2017-10600
ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same uid as the image creator has unintended access to cloud-init and snapd directories...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...
PT-2017-18436
Name of the Vulnerable Software and Affected Versions Microsoft Edge in Microsoft Windows versions prior to the fixed version Description A security issue exists where Microsoft Edge fails to properly validate certain specially crafted documents, allowing an attacker to trick a user into loading ...
Same-Origin Policy Bypass
github.com/shopify/toxiproxy is vulnerable to same-origin policy bypass. A malicious user can use the library to bypass web browsers same origin policy and obtain sensitive information...
Mail.ru: XSS bypass Script execute,Read any file,execute any javascript code--UXSS
Mail attachment XSS bypass vulnerability--UXSS Vulnerability impact： Mail.Ru Mail for iOS MyMail for iOS explain: Mail app supports HTML attachments, however，Cannot execute javascript. for example alert/xss/ These statements can not be executed in the html attachments...LOL However, the addition ...
CVE-2017-8449
X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index...
CVE-2017-8523
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microso...
Security feature bypass
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...
Security feature bypass
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microso...
CVE-2017-8523
Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2017-8523 are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2017-8523: Origin Validation Error
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microso...
Mozilla Fixes 32 Vulnerabilities in Firefox 54
Mozilla fixed 32 vulnerabilities, including a critical bug that could have resulted in a crash, with the release Tuesday of Firefox 54, the latest version of its flagship browser. The critical bug, a use-after-free vulnerability, was dug up by longtime bug hunter Nils. The vulnerability...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...
PT-2017-18387
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security issue exists due to Microsoft Edge's failure to correctly apply the Same Origin Policy for HTML elements in other browser windows. This could allow an attacker to deceive a...
PT-2017-18389
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security issue exists due to the improper enforcement of same-origin policies by Microsoft Edge, potentially allowing an attacker to access information from external origins...
Security vulnerabilities fixed in Firefox 54 — Mozilla
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. A use-after-free vulnerability when using an incorrect URL during the...