<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 15:31:22 +0000</lastBuildDate>
    <item>
      <title>CERTA-2010-AVI-077 — De multiples vulnérabilités dans &lt;span class="textit"&gt;Google
Chrome&lt;/span&gt; permettent, entre autres, l'exécution de cod…</title>
      <link>https://vulnerability.circl.lu/vuln/CERTA-2010-AVI-077</link>
      <description>CERTA-2010-AVI-077</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/CERTA-2010-AVI-077</guid>
    </item>
    <item>
      <title>fkie_cve-2010-0650</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2010-0650</link>
      <description>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2010-0650</guid>
    </item>
    <item>
      <title>GHSA-3hxx-7wff-xwh8</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-3hxx-7wff-xwh8</link>
      <description>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-3hxx-7wff-xwh8</guid>
    </item>
    <item>
      <title>gsd-2010-0650</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2010-0650</link>
      <description>gsd-2010-0650</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2010-0650</guid>
    </item>
    <item>
      <title>VAR-201002-0201</title>
      <link>https://vulnerability.circl.lu/vuln/var-201002-0201</link>
      <description>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event. WebKit is prone to a security-bypass vulnerability. 
An attacker may leverage this issue to bypass intended security restrictions to open arbitrary popup windows, which may lead to further attacks. 
NOTE: This issue was previously covered in BID 37948 (Google Chrome prior to 4.0.249.78 Multiple Security Vulnerabilities), but has been assigned its own record to better document it. WebKit is an open source browser web page layout engine, and the corresponding engines are Gecko (the layout engine used by Mozilla, Firefox, etc.) and Trident (also known as MSHTML, the layout engine used by IE). -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1&lt;/p&gt;
&lt;p&gt;_______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Mandriva Linux Security Advisory                         MDVSA-2011:039
 http://www.mandriva.com/security/
 _______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Package : webkit
 Date    : March 2, 2011
 Affected: 2010.1
 _______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Problem Description:&lt;/p&gt;
&lt;p&gt;Multiple cross-site scripting, denial of service and arbitrary code
 execution security flaws were discovered in webkit. 
 
 Please consult the CVE web links for further information. 
 _______________________________________________________________________…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event. WebKit is prone to a security-bypass vulnerability. 
An attacker may leverage this issue to bypass intended security restrictions to open arbitrary popup windows, which may lead to further attacks. 
NOTE: This issue was previously covered in BID 37948 (Google Chrome prior to 4.0.249.78 Multiple Security Vulnerabilities), but has been assigned its own record to better document it. WebKit is an open source browser web page layout engine, and the corresponding engines are Gecko (the layout engine used by Mozilla, Firefox, etc.) and Trident (also known as MSHTML, the layout engine used by IE). -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1&lt;/p&gt;
&lt;p&gt;_______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Mandriva Linux Security Advisory                         MDVSA-2011:039
 http://www.mandriva.com/security/
 _______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Package : webkit
 Date    : March 2, 2011
 Affected: 2010.1
 _______________________________________________________________________&lt;/p&gt;
&lt;p&gt;Problem Description:&lt;/p&gt;
&lt;p&gt;Multiple cross-site scripting, denial of service and arbitrary code
 execution security flaws were discovered in webkit. 
 
 Please consult the CVE web links for further information. 
 _______________________________________________________________________…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/var-201002-0201</guid>
    </item>
  </channel>
</rss>
