Page 322 of 3216 results (0.014 seconds)

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

07 Sep 2010 — Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors. Google Chrome anterior a v6.0.472.53 no maneja apropiadamente el valor "_blank" para el atributo de destino de elementos sin especificar, lo que permite a atacantes remotos evitar el bloqueo de "pop-up" a través de vectores desconocidos • http://code.google.com/p/chromium/issues/detail?id=34414 •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

07 Sep 2010 — Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors. Vulnerabilidad sin especificar en Google Chrome anterior a v6.0.472.53 permite a atacantes remotos enumerar el conjunto de extensiones instaladas a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=45876 •

CVSS: 9.3EPSS: 13%CPEs: 8EXPL: 0

07 Sep 2010 — Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus. Google Chrome anterior a v6.0.472.53 no realiza apropiadamente el manejo del foco, lo que permite a atacantes remotos causar una denegación de servicio o posiblemente tener otros impactos sin especificar a través d... • http://code.google.com/p/chromium/issues/detail?id=52443 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0

07 Sep 2010 — WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site. Google Chrome anterior a v6.0.472.53 no restringe apropiadamente el acceso de lectura a las imágenes, lo que permite a atacantes remotos evitar la "Same Origin Policy" y ob... • http://code.google.com/p/chromium/issues/detail?id=53001 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

07 Sep 2010 — Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors. Google Chrome anterior a v6.0.472.53 no limita apropiadamente el número de entradas de autocompletado que se almacenan, lo que podría suponer un impacto y unos vectores de ataque sin especificar. • http://code.google.com/p/chromium/issues/detail?id=51727 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

24 Aug 2010 — Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors, a different vulnerability than CVE-2010-2897. Google Chrome anterior a versión 6.0.472.53, no mitiga apropiadamente un fallo no especificado en el kernel de Windows, que tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente de CVE-2010-2897. • http://code.google.com/p/chromium/issues/detail?id=51070 •