Mozilla Firefox ESR < 78.9

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-11 advisory. - Mozilla developers and community members Alexis Beingessner, Tyson Smith, Julien Wajsberg, and Matthew...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A vulnerability exists in Google Chrome versions prior to 89.0.4389.72 where the full screen mode is improperly implemented. A remote attacker can spoof the content...

CVE-2021-23959

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

CVE-2021-23959

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

CVE-2021-23959

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

CVE-2021-23959

An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 85...

EulerOS 2.0 SP2 : webkitgtk3 (EulerOS-SA-2021-1371)

According to the version of the webkitgtk3 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform.This package contains WebKitGTK+ for GTK+ 3.Security...

Huawei EulerOS: Security Advisory for webkitgtk3 (EulerOS-SA-2021-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chromium 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A Skia improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.146. An attacker can exploit this vulnerability to spoof the contents of the multifunction box URL bar via a crafte...

Security update for opera (moderate)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:0138-1 Rating: moderate References: Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113...

LY Corporation: Webview address bar spoofing in LINE client for iOS

When navigation to an invalid hostname occurs, the address bar is updated even though the navigation is cancelled. Due to this incorrect timing of updating the address bar and applying URL normalization, it can be recognized as a different hostname from the actual hostname. As a result, attacker...

The vulnerability of the Mozilla Firefox browser, related to ignoring leading JavaScript symbols in the address line, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Mozilla Firefox browser is related to the ignoring of leading JavaScript symbols in the address line. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking the input data in the address bar, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to the lack of a mechanism for checking the input data in the address bar. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

EulerOS 2.0 SP3 : webkitgtk3 (EulerOS-SA-2021-1130)

According to the version of the webkitgtk3 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could...

Huawei EulerOS: Security Advisory for webkitgtk3 (EulerOS-SA-2021-1130)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2021-04655)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox for Android prior to version 84. By attempting to connect to a website using a port that fails to respond, an attacker can control the content of tabs...

UBUNTU-CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-26979

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what...

CVE-2020-26979

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what...

The vulnerability of the address bar replacement mechanism, which involves user interaction with the address bar and the “onblur” event of Firefox, Firefox ESR, and the Thunderbird email client, allows attackers to perform spoofing attacks.

The vulnerability of the address bar replacement mechanism, through user interaction with the address bar and the “onblur” event of Firefox, Firefox ESR, and the Thunderbird email client, is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor t...