https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:51:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09971 bdu:2015-09971 https://cve.radiocsirt.org/vuln/bdu:2015-09971 https://cve.radiocsirt.org/vuln/certfr-2015-avi-167 certfr-2015-avi-167 https://cve.radiocsirt.org/vuln/certfr-2015-avi-167 https://cve.radiocsirt.org/vuln/cnvd-2015-02613 cnvd-2015-02613 https://cve.radiocsirt.org/vuln/cnvd-2015-02613 https://cve.radiocsirt.org/vuln/euvd-2026-90089 EUVD-2026-90089 https://cve.radiocsirt.org/vuln/euvd-2026-90089 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1244 <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-1244 https://cve.radiocsirt.org/vuln/ghsa-g86g-ggjj-ppxm <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> https://cve.radiocsirt.org/vuln/ghsa-g86g-ggjj-ppxm https://cve.radiocsirt.org/vuln/gsd-2015-1244 gsd-2015-1244 https://cve.radiocsirt.org/vuln/gsd-2015-1244 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 <p>chromedriver-55.0.2883.75-3.1 on GA media</p> <p>chromedriver-55.0.2883.75-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 https://cve.radiocsirt.org/vuln/rhsa-2015:0816 <p>chromium-browser: Cross-origin-bypass in HTML parser chromium-browser: Cross-origin-bypass in Blink chromium-browser: Use-after-free in IPC chromium-browser: Out-of-bounds write in Skia chromium-browser: Out-of-bounds read in WebGL chromium-browser: tap-jacking vulnerability chromium-browser: Type confusion in V8 chromium-browser: HSTS bypass in WebSockets chromium-browser: Use-after-free in PDFium chromium-browser: Out-of-bounds read in Blink chromium-browser: Scheme issues in OpenSearch chromium-browser: SafeBrowsing bypass chromium-browser: Various fixes from internal audits, fuzzing and other initiatives</p> <p>chromium-browser: Cross-origin-bypass in HTML parser chromium-browser: Cross-origin-bypass in Blink chromium-browser: Use-after-free in IPC chromium-browser: Out-of-bounds write in Skia chromium-browser: Out-of-bounds read in WebGL chromium-browser: tap-jacking vulnerability chromium-browser: Type confusion in V8 chromium-browser: HSTS bypass in WebSockets chromium-browser: Use-after-free in PDFium chromium-browser: Out-of-bounds read in Blink chromium-browser: Scheme issues in OpenSearch chromium-browser: SafeBrowsing bypass chromium-browser: Various fixes from internal audits, fuzzing and other initiatives</p> https://cve.radiocsirt.org/vuln/rhsa-2015:0816 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1244 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt</p> <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt</p> <p>The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1244