spoof vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page....

Redhat Linux Server 6.0 Redhat Linux Workstation 6.0 Redhat Linux Desktop 6.0 Debian Debian Linux 9.0 Debian Debian Linux 8.0 Google Chrome

7.5

CVSSv3

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page....

Apple Safari Apple Iphone Os

3.3

CVSSv3

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox < 76....

Mozilla Firefox

7.5

CVSSv3

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox < 52 and Thunderbird < 52....

Mozilla Firefox Mozilla Thunderbird

NA

Security Vulnerabilities fixed in Firefox 96: Calling into reportValidity could have lead to fullscreen window spoof. A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed. This bug only...

6.5

CVSSv3

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68....

Mozilla Firefox

6.5

CVSSv3

A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects...

Mozilla Firefox

5.3

CVSSv3

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...

Yandex Yandex Browser

4.7

CVSSv3

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method....

Opensuse Opensuse 13.2 Opensuse Opensuse 13.1 Opensuse Leap 42.1 Mozilla Firefox 43.0.4 Google Android

5.3

CVSSv3

statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks....

Status Statusnet 2010

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook