Lucene search
+L

2387 matches found

CNNVD
CNNVD
added 2022/04/15 12:00 a.m.11 views

F-Secure SAFE 安全漏洞

F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-secure. A security vulnerability exists in F-Secure SAFE version 8.6 and earlier versions, which stems from the browser not displaying the full URL, such as a port number. A maliciously crafted website can be used ...

4.3CVSS5.2AI score0.00455EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.11 views

F-Secure SAFE安全漏洞

F-secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-secure. A security vulnerability exists in F-Secure SAFE, which originates from the fact that displaying an old URL may lead to address bar spoofing if navigation to a new URL fails. Address bar spoofing can be use...

4.3CVSS5.2AI score0.00455EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/25 10:15 p.m.5 views

CVE-2021-44683

The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function used to open a secondary browser window. This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would...

8.2CVSS7.2AI score0.00972EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/25 10:15 p.m.26 views

CVE-2021-44683

The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function used to open a secondary browser window. This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would...

8.2CVSS6AI score
SaveExploits0References1
NVD
NVD
added 2022/03/25 10:15 p.m.27 views

CVE-2021-44683

The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function used to open a secondary browser window. This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would...

8.2CVSS0.00972EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/25 10:15 p.m.23 views

Design/Logic Flaw

The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function used to open a secondary browser window. This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would...

5.8CVSS7.5AI score0.00972EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/25 9:13 p.m.32 views

CVE-2021-44683

The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function used to open a secondary browser window. This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would...

7.8AI score0.00972EPSS
SaveExploits1References1
CVE
CVE
added 2022/03/25 9:13 p.m.85 views

CVE-2021-44683

The CVE-2021-44683 entry concerns the DuckDuckGo browser on iOS (version 7.64.4). The issue is a spoofing vulnerability caused by mishandling of the JavaScript window.open function, which can allow an attacker to show a legitimate-looking URL in the address bar while serving content from the atta...

8.2CVSS7.5AI score0.00972EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.11 views

CVE-2022-22654

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.8AI score0.009EPSS
SaveExploits0References3
NVD
NVD
added 2022/03/18 6:15 p.m.27 views

CVE-2022-22654

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS0.009EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/18 6:15 p.m.13 views

CVE-2022-22654

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.8AI score0.009EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/18 6:15 p.m.27 views

Design/Logic Flaw

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.8AI score0.009EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/03/18 6:00 p.m.36 views

CVE-2022-22654

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

6.1AI score0.009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:00 a.m.13 views

The vulnerability of Google Chrome’s Navigation function, which allows a hacker to manipulate the URL bar content

The vulnerability of Google Chrome’s Navigation function is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows a malicious actor to manipulate the URL field using a specially created HTML page...

7.1CVSS7.1AI score0.00793EPSS
SaveExploits1References16Affected Software8
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.7 views

PT-2022-15602 · Apple · Watchos +2

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.5 Safari versions prior to 15.4 Description: A user interface issue was addressed, which could allow address bar spoofing when visiting a malicious website. Recommendations: For watchOS versions prior to 8.5, updat...

4.3CVSS4.4AI score0.009EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.9 views

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple Inc. in the United States. Apple watchOS 8.5 previously contained a security vulnerability that originated in Apple's browser that could lead to address bar spoofing when visiting a malicious website...

4.3CVSS5.2AI score0.009EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.264 views

AlmaLinux 8 : GNOME (ALSA-2019:3553)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2019:3553 advisory. - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical...

9.3CVSS6.8AI score0.18108EPSS
SaveExploits25References52
CNNVD
CNNVD
added 2022/02/01 12:00 a.m.9 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome, which could be exploited by remote attackers to spoof the contents of the multi-function box URL bar via a crafted HTML page...

6.5CVSS8.3AI score0.00655EPSS
SaveExploits0References12
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.24 views

Mageia: Security Advisory (MGASA-2013-0383)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.6AI score0.0609EPSS
SaveExploits0References7
NVD
NVD
added 2021/12/16 11:15 a.m.30 views

CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.6CVSS0.00705EPSS
SaveExploits0References2
Rows per page
Query Builder