CVE-2015-7185

CVE-2015-7185 affects Mozilla Firefox for Android prior to 42.0, where the address bar is not restored after exiting fullscreen, enabling spoofing via crafted JavaScript. Affected product: Firefox for Android; root cause: missing restoration of the address bar on exit from fullscreen mode; impact...

CVE-2007-4225

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...

Microsoft Internet Explorer Address Bar Spoofing (CVE-2004-2219)

A vulnerability exists in Internet Explorer's address bar updating method due to incorrect handling of unknown protocol handlers. A specific sequence of steps, executed in an Internet Explorer browser can allow for arbitrary content to be represented by a false address in the address bar. This ca...

Oracle: Security Advisory (ELSA-2007-0905)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Address Bar Forgery Vulnerability (CNVD-2015-06287)

Mozilla Firefox is an open source web browser. Mozilla Firefox has an unspecified security vulnerability that allows remote attackers to construct malicious web pages that can be tricked into being parsed by users, and can spoof address bar properties...

Mozilla Firefox Interface Forgery Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox when the program is enabled in read mode, which allows remote attackers to exploit the vulnerability to forge relationships between address-bar URLs and Web content...

CVE-2015-4508

Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site...

CVE-2015-4476

Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute...

CVE-2015-4476

Mozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar attributes by leveraging lack of navigation after a paste of a URL with a nonstandard scheme, as demonstrated by spoofing an SSL attribute...

CVE-2015-4508

Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site...

UBUNTU-CVE-2015-4508

Mozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the relationship between address-bar URLs and web content via a crafted web site...

Google Chrome Input Validation Vulnerability (CNVD-2015-03346)

Google Chrome on Android is a web browser developed by the American company Google Google for the Android platform. A security vulnerability exists in the android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java file in versions of Google Chrome prior to 43.0.2357.65 on the Android...

Address-Spoofing Bug Haunts Android Stock Browser

There’s an easily exploitable vulnerability in the Android stock browser that enables an attacker to spoof the URL in the address bar and force a victim to visit a malicious site while believing he is visiting a benign one. Security researcher Rafay Baloch discovered the vulnerability and develop...

Google Chrome < 41.0.2272.76 Multiple Vulnerabilities

Binary data 8684.pasl...

GLSA-201504-01 : Mozilla Products: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201504-01 Mozilla Products: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Firefox, Thunderbird, and SeaMonkey. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

UBUNTU-CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

Cross site scripting

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

CVE-2015-2239

Chrome before 41.0.2272.76 is affected by CVE-2015-2239, where the browser’s interaction between the 1993 search features and restore-from-disk RELOAD transitions can be abused to spoof the address bar on a search-results page via a compromised search engine or a search-engine XSS vulnerability. ...