Mozilla Firefox Input Validation Error Vulnerability (CNVD-2020-35374)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the implementation of the address bar in versions of Mozilla Firefox prior to 76. A local attacker could exploit the vulnerability to forge the current address...

Spoofable Address Bar

WebKitGTK+ is vulnerable to spoofable address bar. Due to lack of proper implementation of the history feature, it allows remote attackers to spoof the address bar via unspecified vectors...

Spoofable Address Bar

Mozilla Firefox is vulnerable to Spoofable Address Bar. A flaw was found in the way Firefox displays the address bar when window.open is called in a certain way. An attacker could use this flaw to conceal a malicious URL, possibly tricking a user into believing they are viewing a trusted site...

Phishing Attacks

kdebase is vulnerable to phishing attacks. The vulnerability exists as it was possible for a malicious website to cause the Konqueror address bar to display information which could trick a user into believing they are at a different website than they actually are...

EulerOS Virtualization for ARM 64 3.0.2.0 : webkitgtk4 (EulerOS-SA-2020-1199)

According to the version of the webkitgtk4 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript...

Huawei EulerOS: Security Advisory for webkitgtk4 (EulerOS-SA-2020-1199)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

Design/Logic Flaw

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

CVE-2019-12278

The CVE-2019-12278 vulnerability affects Opera for Android up to version 53, where Address Bar Spoofing can occur due to mishandling of Unicode characters with Right‑to‑Left ordering and the first-strong character heuristic. This can allow a spoofed URL to be displayed, potentially misleading use...

CVE-2019-12278

Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numeric...

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-3833

CVE-2020-3833 affects Apple Safari; an inconsistent user interface issue could enable address bar spoofing when visiting a malicious site. The vulnerability is fixed in Safari 13.0.5 through improved state management and input handling. Affected platforms include macOS Mojave/High Sierra and Cata...

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address bar spoofing...

The vulnerability of the Firefox browser, related to a encoding error of the Latin character “kra”, allows an attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to a coding error in the Latin character “kra”, which can be used to replace the standard character “k” in the address bar. Exploiting this vulnerability allows an attacker to compromise data integrity...

Google Chrome Omnibox Input Validation Error Vulnerability (CNVD-2020-10250)

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in Google Chrome versions prior to 80.0.3987.87 for iOS. The vulnerability can be exploited by an attacker to spoof the content URL bar of Omnibox with the help of...

The vulnerability of Firefox browser, related to an error in displaying the domain name in the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the display of the domain name in the address bar. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

The vulnerability of Firefox browser, related to an error in determining the user cursor position, which may be located over the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the determination of the user’s cursor position, which can be located above the address bar. Exploiting this vulnerability allows a remote attacker to compromise data integrity...