Masahiro Yamada

An information disclosure issue exists, allowing remote attackers to perform cross-domain reading of JSON files via a crafted web site. This could enable an attacker to gain access and read the contents of JSON data files.

The issue allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log. This is a cross-site scripting (XSS) issue.

The issue allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log. This is a cross-site scripting (XSS) issue.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding.

The issue arises from improper handling of the Quarantine attribute of HTML documents. This allows remote attackers to read arbitrary files on a user's system by leveraging the presence of a downloaded document, but it requires user assistance.

The issue allows remote attackers to spoof the address bar via unspecified homograph characters.

The issue allows remote attackers to cause a denial of service, specifically disk consumption, by utilizing invalid URLs. These invalid URLs trigger the creation of error pages, leading to the denial of service.

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a cross-site scripting (XSS) vulnerability in WebKit. It allows remote attackers to inject arbitrary web script or HTML via vectors related to improper UTF-7 canonicalization and lack of termination of a quoted string in an HTML document.

The issue allows remote attackers to spoof URLs and conduct phishing attacks by decoding invisible characters when they are displayed in the location bar, causing an incorrect address to be displayed.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks due to improper HTML escaping in file:// URLs in directory listings. This can be achieved via a crafted filename.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `buildid` field in the "guided form" of the enter bug.cgi script.