Archive
15 June 2009
Vulnerabilities first published on this day (UTC), newest first.
17 results · Feed
-
Unscored —
Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned b…
-
Unscored —
Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-…
-
Unscored —
Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man…
-
Unscored —
Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page retur…
-
Unscored —
Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which al…
-
Unscored —
Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-…
-
Unscored —
Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle …
-
Unscored —
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows ma…
-
Unscored —
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or …
-
Unscored —
Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-l…
-
Unscored —
Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1)…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allow…
-
Unscored —
Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level fr…
-
Unscored —
src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the …
-
Unscored —
Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2)…
-
Unscored —
Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the…
-
Unscored —
Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-…