Page 2 of 13 results (0.006 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-8507

https://notcve.org/view.php?id=CVE-2016-8507

01 Mar 2017 — Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site. Yandex Browser para iOS en versiones anteriores a 16.10.0.2357 no restringe adecuadamente el procesamiento de URLs de facetime://, lo que permite a atacantes remotos iniciar la llamada cara a cara sin la aprobación del usuario y obtener datos de vídeo y audio ... • http://www.securityfocus.com/bid/96517 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-8508

https://notcve.org/view.php?id=CVE-2016-8508

01 Mar 2017 — Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web-sites with special content-type, which could be used by remote attacker for prevention Protect warning on own malicious web-site. Yandex Browser para escritorio en versiones anteriores a 17.1.1.227 no muestra las advertencias de Protect (similar a Safebrowsing en Chromium) en sitios web con un tipo de contenido especial, lo que podría ser usado por atacantes remotos para prevenir la adver... • http://www.securityfocus.com/bid/96514 • CWE-254: 7PK - Security Features •

CVSS: 7.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-8503

https://notcve.org/view.php?id=CVE-2016-8503

26 Oct 2016 — Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special JavaScript. Yandex Protect de alerta Anti-phishing en Yandex Browser para escritorio desde la versión 16.7 hasta la versión 16.9 podría ser utilizado por un atacante remoto para forzar contraseñas a través de un ataque de fuerza bruta desde importantes recursos web con JavaScript especial. • http://www.securityfocus.com/bid/93921 • CWE-254: 7PK - Security Features •