Archive
5 June 2016
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —
The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Googl…
-
Unscored —
Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspe…
-
Unscored —
browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.…
-
Unscored —
The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704…
-
Unscored —
Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google C…
-
Unscored —
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl…
-
Unscored —
uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, whic…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service …
-
Unscored —
The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and J…
-
Unscored —
extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not proper…
-
Unscored —
Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause…
-
Unscored —
browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clea…
-
Unscored —
Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 all…
-
Unscored —
The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in …
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service …
-
Unscored —
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome be…
-
Unscored —
The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerCon…
-
Unscored —
extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects duri…
-
Unscored —
WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-ori…
-
Unscored —
The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy …
-
Unscored —
The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does …
-
Unscored —
Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by levera…
-
Unscored —
WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Googl…
-
Unscored —
Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, al…
-
Unscored —
The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and J…
-
Unscored —
The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.…
-
Unscored —
objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy…
-
Unscored —
The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows …
-
Unscored —
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which all…
-
Unscored —
The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome bef…
-
Unscored —
core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values…
-
Unscored —
The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes,…
-
Unscored —
Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote …