NewStart CGSL CORE 5.05 / MAIN 5.05 : webkitgtk4 Multiple Vulnerabilities (NS-SA-2021-0166)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has webkitgtk4 packages installed that are affected by multiple vulnerabilities: - WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS,...

Google Chrome 安全特征问题漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper implementation of WebApp Installer. An attacker could potentially override and spoof the content of the multi-function box URL bar via a crafted HTML page...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:1358-1 Rating: important References: Cross-References: CVE-2021-37974 CVE-2021-37975 CVE-2021-37976 Affected Products: openSUSE Leap 15.3:NonFree openSUSE Leap 15.2:NonFree An update that fixes three...

CVE-2020-27970

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...

CVE-2020-27969

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

CVE-2020-27969

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

Spoofing

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

Design/Logic Flaw

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...

CVE-2020-27970

CVE-2020-27970 affects Yandex Browser prior to 20.10.0. The vulnerability stems from insufficient validation of the address bar’s authenticity, enabling remote attackers to spoof the address bar. Public sources in the connected documents consistently reference “Yandex Browser before 20.10.0 allow...

CVE-2020-27970

Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar...

CVE-2020-27969

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

CVE-2020-27969

CVE-2020-27969 affects Yandex Browser for Android (version 20.8.4). Multiple sources describe a vulnerability enabling remote SOP bypass and address bar spoofing. The available connected documents note the software and impact but do not provide root-cause details or a published fix/remediation. I...

Yandex Browser 访问控制错误漏洞

Yandex Browser is a desktop version of a web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser Android version 20.8.4, which allows remote attackers to perform SOP bypass and address bar spoofing...

Yandex Browser 安全漏洞

Yandex Browser is a desktop version of the web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser versions prior to 20.10.0, which stems from the software's lack of sufficient validation of the authenticity of the address bar. This allows remote attackers t...

PT-2021-7166 · Yandex · Yandex Browser Lite

Name of the Vulnerable Software and Affected Versions: Yandex Browser Lite for Android affected versions not specified Description: The issue is related to an authentication bypass via spoofing, which could allow a remote attacker to replace the value of the address bar. Recommendations: At the...

CVE-2021-36215

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling...

CVE-2021-36215

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling...

CVE-2021-36215

CVE-2021-36215 affects the LINE client for iOS (10.21.3 and earlier) and is a design/implementation flaw that enables address bar spoofing in the in-app browser. The root cause is improper handling of the address bar during navigation and HTTP redirect processing, including inserting malicious Un...

CVE-2021-36215

LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling...

KLA12272 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory safety vulnerability can be exploited to execute arbitrary...