https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:31:08 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-272 certfr-2015-avi-272 https://cve.radiocsirt.org/vuln/certfr-2015-avi-272 https://cve.radiocsirt.org/vuln/cnvd-2015-04246 cnvd-2015-04246 https://cve.radiocsirt.org/vuln/cnvd-2015-04246 https://cve.radiocsirt.org/vuln/euvd-2026-91986 EUVD-2026-91986 https://cve.radiocsirt.org/vuln/euvd-2026-91986 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3658 <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3658 https://cve.radiocsirt.org/vuln/ghsa-7w75-mgjq-f5m7 <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ghsa-7w75-mgjq-f5m7 https://cve.radiocsirt.org/vuln/gsd-2015-3658 gsd-2015-3658 https://cve.radiocsirt.org/vuln/gsd-2015-3658 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10461-1 <p>libjavascriptcoregtk-1_0-0-2.4.11-3.3 on GA media</p> <p>libjavascriptcoregtk-1_0-0-2.4.11-3.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10461-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3658 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: webkitgtk, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: qtwebkit-opensource-src</p> <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: webkitgtk, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: qtwebkit-opensource-src</p> <p>The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3658