2354 matches found
CVE-2016-1958
browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL...
CVE-2016-1965
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property...
CVE-2016-1958
The CVE-2016-1958 issue affects Mozilla Firefox and Firefox ESR: browser address bar spoofing via javascript: URLs in Firefox <= 45.0 and ESR
Mozilla Firefox and Firefox ESR Address Bar Forgery Vulnerability
Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR,...
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (important)
This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues: MozillaFirefox was updated to Firefox 45.0 boo969894 requires NSPR 4.12 / NSS 3.21.1 Instant browser tab sharing through Hello Synced Tabs button in button bar Tabs synced via Firefox Accounts from other devices...
Debian DSA-3510-1 : iceweasel - security update
Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, denial of service, address bar spoofing and...
Firefox 45 Fixes 40 Vulnerabilities, 22 Critical
Much like Google, which updated Chrome yesterday, Mozilla released a new version of Firefox on Tuesday, fixing 40 vulnerabilities in the browser. The update, Firefox 45, included eight bulletins rated critical and patched a handful of serious use-after-free vulnerabilities and a pair of buffer...
Mozilla: Displayed page address can be overridden (MFSA 2016-21)
browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL...
Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property...
Debian Security Advisory DSA 3510-1 (iceweasel - security update)
Multiple security issues have been found in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3510.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3510-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks Gm...
DSA-3510-1 iceweasel - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3510-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1958
browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL...
UBUNTU-CVE-2016-1965
Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property...
Mozilla Firefox Spoofing Vulnerability (CNVD-2016-00849)
Mozilla Firefox on Android is an open source web browser for the Android platform. Mozilla Firefox has a security vulnerability that allows remote attackers to spoof the address bar using the scrollTo method...
Mozilla Firefox Address Bar Forgery Vulnerability (CNVD-2016-00850)
Mozilla Firefox on Android is an open source web browser for the Android platform. A security vulnerability exists in Mozilla Firefox that allows remote attackers to spoof the contents of the address bar by tricking users into copying the wyciwyg: URI or resource: URI link...
Mozilla Firefox Spoofing Vulnerability (CNVD-2016-00905)
Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox on Android prior to version 44.0. A remote attacker can exploit the vulnerability by spoofing the address bar with a data...
CVE-2016-1943
Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via the scrollTo method...
