spoof vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page....

Redhat Linux Server 6.0 Redhat Linux Workstation 6.0 Redhat Linux Desktop 6.0 Debian Debian Linux 9.0 Debian Debian Linux 8.0 Google Chrome

7.5

CVSSv3

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page....

Apple Safari Apple Iphone Os

3.3

CVSSv3

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76....

Mozilla Firefox

5.9

A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR...

Mozilla Firefox Mozilla Firefox Esr Mozilla Thunderbird1 Github repository available

7.5

CVSSv3

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox < 52 and Thunderbird < 52....

Mozilla Firefox Mozilla Thunderbird

5.3

CVSSv3

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...

Yandex Yandex Browser

6.5

CVSSv3

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68....

Mozilla Firefox

5.3

CVSSv3

statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks....

Status Statusnet 2010

NA

OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors....

Openafs Openafs

6.5

CVSSv3

A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects...

Mozilla Firefox

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook