Lucene search
+L

9309 matches found

Prion
Prion
added 2015/10/15 10:59 a.m.27 views

Cross site scripting

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

7.5CVSS6.5AI score0.01622EPSS
SaveExploits0References10Affected Software1
CVE
CVE
added 2015/10/15 10:00 a.m.102 views

CVE-2015-6762

CVE-2015-6762 affects Chromium/Google Chrome engines prior to 46.0.2490.71. The vulnerability lies in the CSSFontFaceSrcValue::fetch path in Blink’s CSS font loading, where the CORS cross-origin request algorithm is not used for fonts with seemingly same-origin URLs, allowing a remote server to b...

7.5CVSS8.8AI score0.01622EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2015/10/15 10:00 a.m.28 views

CVE-2015-6755

The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin...

9AI score0.02103EPSS
SaveExploits1References10
CVE
CVE
added 2015/10/15 10:00 a.m.126 views

CVE-2015-6755

CVE-2015-6755 affects Blink (ContainerNode::parserInsertBefore in core/dom/ContainerNode.cpp) used by Google Chrome prior to 46.0.2490.71. The issue allows bypassing the Same Origin Policy via crafted JavaScript that triggers a DOM tree insertion even when a parent node no longer contains a child...

7.5CVSS8.8AI score0.02103EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
added 2015/10/15 10:00 a.m.34 views

CVE-2015-6762

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

9AI score0.01622EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2015/10/15 10:00 a.m.39 views

CVE-2015-6755

Removed by vendor...

7.5CVSS9.4AI score0.02103EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2015/10/15 12:00 a.m.29 views

CVE-2015-6762

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

7.5CVSS7.2AI score0.01622EPSS
SaveExploits0References6
OSV
OSV
added 2015/10/15 12:00 a.m.8 views

UBUNTU-CVE-2015-6762

The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets CSS implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows...

7.5CVSS7.3AI score0.01622EPSS
SaveExploits0References7
OSV
OSV
added 2015/10/15 12:00 a.m.9 views

UBUNTU-CVE-2015-7628

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain...

5CVSS6.1AI score0.04308EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/10/15 12:00 a.m.29 views

FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)

Adobe reports : These updates resolve a vulnerability that could be exploited to bypass the same-origin-policy and lead to information disclosure CVE-2015-7628. These updates include a defense-in-depth feature in the Flash broker API CVE-2015-5569. These updates resolve use-after-free...

10CVSS6.5AI score0.08245EPSS
SaveExploits0References15
OSV
OSV
added 2015/10/15 12:00 a.m.8 views

UBUNTU-CVE-2015-6755

The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin...

7.5CVSS7.3AI score0.02103EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2015/10/15 12:00 a.m.17 views

Mageia: Security Advisory (MGASA-2015-0305)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.71434EPSS
SaveExploits8References7
OpenVAS
OpenVAS
added 2015/10/15 12:00 a.m.15 views

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2015:1379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.71434EPSS
SaveExploits8References3
Prion
Prion
added 2015/10/15 12:00 a.m.23 views

Design/Logic Flaw

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain...

5CVSS6.7AI score0.04308EPSS
SaveExploits0References12Affected Software4
UbuntuCve
UbuntuCve
added 2015/10/15 12:00 a.m.30 views

CVE-2015-6755

The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin...

7.5CVSS7.2AI score0.02103EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2015/10/15 12:00 a.m.20 views

CVE-2015-7628

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain...

5CVSS6.1AI score0.04308EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/10/15 12:00 a.m.44 views

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1742-1)

flash-player was updated to version 11.2.202.535 to fix 13 security issues bsc950169. These security issues were fixed : - A vulnerability that could be exploited to bypass the same-origin-policy and lead to information disclosure CVE-2015-7628. - A defense-in-depth feature in the Flash broker AP...

10CVSS6.6AI score0.08245EPSS
SaveExploits0References28
CNVD
CNVD
added 2015/10/15 12:00 a.m.6 views

Adobe Flash Player Same-Origin Policy Bypass Information Disclosure Vulnerability (CNVD-2015-06679)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified same-origin policy bypass vulnerability. This allows remote attackers to construct malicious SWF content and trick users into parsing it, which could lead to sensitive information...

5CVSS6.8AI score0.04308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2015/10/14 11:00 p.m.25 views

CVE-2015-7628

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain...

6.1AI score0.04308EPSS
SaveExploits0References12
CVE
CVE
added 2015/10/14 11:00 p.m.97 views

CVE-2015-7628

Adobe Flash Player and related AIR components contain a Same Origin Policy bypass vulnerability (CVE-2015-7628) that could lead to information disclosure. Affected products include Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/macOS, and before 11.2.202.535 on Linux, plus A...

5CVSS6.2AI score0.04308EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder