PT-2012-2974

Name of the Vulnerable Software and Affected Versions unity-firefox-extension version 2.4.1 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage, due to the exposure of the toDataURL function in an API call in the...

CVE-2012-0958: Undefined Security Weakness

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...

[USN-1665-1] unity-firefox-extension vulnerability

========================================================================== Ubuntu Security Notice USN-1665-1 December 13, 2012 unity-firefox-extension vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

Ubuntu: Security Advisory (USN-1665-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.10 : unity-firefox-extension vulnerability (USN-1665-1)

It was discovered that unity-firefox-extension bypassed the same origin policy checks in certain circumstances. If a user were tricked into opening a malicious page, an attacker could exploit this to steal confidential data or perform other security-sensitive operations. Note that Tenable Network...

USN-1665-1: unity-firefox-extension vulnerability

It was discovered that unity-firefox-extension bypassed the same origin policy checks in certain circumstances. If a user were tricked into opening a malicious page, an attacker could exploit this to steal confidential data or perform other security-sensitive operations...

SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 (MozillaThunderbird)

Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201209171.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

SuSE Update for seamonkey openSUSE-SU-2012:0935-1 (seamonkey)

Check for the Version of seamonkey OpenVAS Vulnerability Test $Id: gbsuse201209351.nasl 8249 2017-12-27 06:29:56Z teissa $ SuSE Update for seamonkey openSUSE-SU-2012:0935-1 seamonkey Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

XrayWrappers exposes chrome-only properties when not in chrome compartment — Mozilla

Mozilla developer Peter Van der Beken discovered that same-origin XrayWrappers expose chrome-only properties even when not in a chrome compartment. This can allow web content to get properties of DOM objects that are intended to be chrome-only...

XSS Vulnerability in Apple website

A 16 years old Spanish Whitehat hacker going by name "The Pr0ph3t" found XSS Vulnerability on Apple website. The Vulnerability reported in Apple subdomain - https://locate.apple.com, where users can choose a service center location. About Cross site scripting : Cross-Site Scripting attacks are a...

Opera < 12.10 Multiple Vulnerabilities

Binary data 800822.prm...

Opera < 12.10 Multiple Vulnerabilities

Binary data 6618.prm...

CVE-2012-0958

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...

Opera < 12.10 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.10 and is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to certificate revocation checking that can allow the application to indicate that a site is secure even though the check has...

Debian DSA-2572-1 : iceape - several vulnerabilities

Several vulnerabilities have been discovered in Iceape, an internet suite based on SeaMonkey : - CVE-2012-3982 Multiple unspecified vulnerabilities in the browser engine allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code...

CentOS Update for thunderbird CESA-2012:1413 centos5

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:1413 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

RedHat Update for thunderbird RHSA-2012:1413-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2012:1413-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for thunderbird CESA-2012:1413 centos6

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2012:1413 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS 5 / 6 : thunderbird (CESA-2012:1413)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian DSA-2569-1 : icedove - several vulnerabilities

Multiple vulnerabilities have been discovered in Icedove, Debian's version of the Mozilla Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-3982 Multiple unspecified vulnerabilities in the browser engine allow remote attackers...