CWE-346: Origin Validation Error, page 18

The product does not properly verify that the source of data or communication is valid.

What the weakness is: CWE-346 at MITRE

1. 7.5CVE-2014-1487EPSS 2.3%2014-02-06

   The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitive authentication in…

2. –CVE-2012-4193EPSS 1.2%2012-10-12

   Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue function during the unwrapping of security …

3. –CVE-2011-3072EPSS 1.2%2012-04-05

   Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.

4. –CVE-2011-3067EPSS 1.3%2012-04-05

   Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

5. –CVE-2011-3056EPSS 1.3%2012-03-22

   Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

6. –CVE-2011-3956EPSS 0.7%2012-02-09

   The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.

7. –CVE-2011-2856EPSS 0.9%2011-09-19

   Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

8. 6.8CVE-2009-4139EPSS 0.9%2011-07-27

   A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. This can lead to unauthorized actions, including disabling use…

9. –CVE-2009-1185ExploitEPSS 81%2009-04-17

   udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

10. 7.5CVE-2005-0877EPSS 2.0%2005-05-02

    Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.

11. 6.1CVE-2003-0981EPSS 0.4%2004-01-05

    FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks.

12. 9.8CVE-2003-0174EPSS 1.0%2003-05-12

    The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.

13. 7.5CVE-2001-1452EPSS 9.4%2001-08-31

    By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.

14. 9.8CVE-2000-1218EPSS 6.2%2000-04-14

    The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote…

15. 7.8CVE-1999-1549EPSS 0.6%1999-11-16

    Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's confi…