https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:01:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2014-avi-100 certfr-2014-avi-100 https://cve.radiocsirt.org/vuln/certfr-2014-avi-100 https://cve.radiocsirt.org/vuln/euvd-2026-108742 EUVD-2026-108742 https://cve.radiocsirt.org/vuln/euvd-2026-108742 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6666 <p>The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.</p> <p>The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-6666 https://cve.radiocsirt.org/vuln/ghsa-qp9p-p38x-xjv3 <p>The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.</p> <p>The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.</p> https://cve.radiocsirt.org/vuln/ghsa-qp9p-p38x-xjv3 https://cve.radiocsirt.org/vuln/gsd-2013-6666 gsd-2013-6666 https://cve.radiocsirt.org/vuln/gsd-2013-6666