Skip to content
OpenAdvisories

Archive

15 June 2009

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned b…

  • Unscored —

    Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-…

  • Unscored —

    Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man…

  • Unscored —

    Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page retur…

  • Unscored —

    Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which al…

  • Unscored —

    Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-…

  • Unscored —

    Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle …

  • Unscored —

    Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows ma…

  • Unscored —

    Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or …

  • Unscored —

    Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-l…

  • Unscored —

    Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1)…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allow…

  • Unscored —

    Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level fr…

  • Unscored —

    src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the …

  • Unscored —

    Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2)…

  • Unscored —

    Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the…

  • Unscored —

    Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-…