Lucene search
+L

2367 matches found

NVD
NVD
added 2020/03/12 10:15 p.m.17 views

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

4.3CVSS4.6AI score0.00822EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/12 10:15 p.m.9 views

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

4.3CVSS5.7AI score0.00822EPSS
SaveExploits1References2
Prion
Prion
added 2020/03/12 10:15 p.m.19 views

Design/Logic Flaw

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

4.3CVSS4.7AI score0.00822EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/03/12 9:48 p.m.27 views

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

4.6AI score0.00822EPSS
SaveExploits1References2
CVE
CVE
added 2020/03/12 9:48 p.m.78 views

CVE-2019-12278

The CVE-2019-12278 vulnerability affects Opera for Android up to version 53, where Address Bar Spoofing can occur due to mishandling of Unicode characters with Right‑to‑Left ordering and the first-strong character heuristic. This can allow a spoofed URL to be displayed, potentially misleading use...

4.3CVSS4.5AI score0.00822EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2020/02/27 9:15 p.m.8 views

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.8AI score0.00716EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/27 9:15 p.m.31 views

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS3.7AI score0.00716EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/27 9:15 p.m.24 views

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS4.4AI score0.00716EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/02/27 8:45 p.m.82 views

CVE-2020-3833

CVE-2020-3833 affects Apple Safari; an inconsistent user interface issue could enable address bar spoofing when visiting a malicious site. The vulnerability is fixed in Safari 13.0.5 through improved state management and input handling. Affected platforms include macOS Mojave/High Sierra and Cata...

4.3CVSS4.7AI score0.00716EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/27 8:45 p.m.42 views

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

4.6AI score0.00716EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.9 views

The vulnerability of the Firefox browser, related to a encoding error of the Latin character “kra”, allows an attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to a coding error in the Latin character “kra”, which can be used to replace the standard character “k” in the address bar. Exploiting this vulnerability allows an attacker to compromise data integrity...

6.5CVSS7AI score0.01393EPSS
SaveExploits1References6Affected Software3
CNVD
CNVD
added 2020/02/17 12:00 a.m.3 views

Google Chrome Omnibox Input Validation Error Vulnerability (CNVD-2020-10250)

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in Google Chrome versions prior to 80.0.3987.87 for iOS. The vulnerability can be exploited by an attacker to spoof the content URL bar of Omnibox with the help of...

4.3CVSS8.4AI score0.01606EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.10 views

The vulnerability of Firefox browser, related to an error in determining the user cursor position, which may be located over the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the determination of the user’s cursor position, which can be located above the address bar. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.7AI score0.00737EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:00 a.m.58 views

The vulnerability of Firefox browser, related to an error in displaying the domain name in the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the display of the domain name in the address bar. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

6.5CVSS7.2AI score0.00846EPSS
SaveExploits0References5Affected Software3
CNVD
CNVD
added 2020/02/12 12:00 a.m.3 views

Google Chrome Omnibox Content Spoofing Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An Omnibox content spoofing vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an improper implementation of Skia in...

4.3CVSS8.3AI score0.01738EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/02/06 12:00 a.m.8 views

Apple Safari Logic Flaw Vulnerability

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari is vulnerable to a logic flaw. An attacker can exploit the vulnerability to cause address bar fraud...

4.3CVSS6.5AI score0.00716EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/01/29 12:00 a.m.33 views

Apple Safari Security Update (HT210922)

Apple Safari is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS5.5AI score0.00716EPSS
SaveExploits0References1
Apple
Apple
added 2020/01/28 12:00 a.m.252 views

About the security content of Safari 13.0.5

About the security content of Safari 13.0.5 This document describes the security content of Safari 13.0.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

9.3CVSS8.7AI score0.027EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.30 views

Huawei EulerOS: Security Advisory for webkitgtk4 (EulerOS-SA-2019-2197)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.4AI score0.04092EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.39 views

Huawei EulerOS: Security Advisory for webkitgtk3 (EulerOS-SA-2019-2196)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.4AI score0.04092EPSS
SaveExploits1References2
Rows per page
Query Builder