Lucene search
+L

2325 matches found

Vulnrichment
Vulnrichment
added 2025/03/24 1:47 p.m.7 views

CVE-2025-30577 WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in mendibass Browser Address Bar Color browser-address-bar-color allows Stored XSS.This issue affects Browser Address Bar Color: from n/a through = 3.3...

7.1CVSS7.3AI score0.00168EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:32 p.m.7 views

WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability

Cross Site Request Forgery CSRF to Stored XSS Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Browser Address Bar Color versions = 3.3...

7.1CVSS6.1AI score0.00168EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.5 views

WordPress plugin Browser Address Bar Color 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS7.9AI score0.00168EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/14 12:0 a.m.13 views

RHEL 9 : webkit2gtk3 (RHSA-2024:9553)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9553 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Visiting a malicious websi...

9.8CVSS7.1AI score0.01061EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2025/03/11 12:0 a.m.19 views

RHEL 8 : webkit2gtk3 (RHSA-2024:9636)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9636 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Use after free in...

9.8CVSS8.4AI score0.01344EPSS
SaveExploits1References35
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.10 views

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows a hacker to replace the address bar.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to substitute the address bar with a specially created link...

9.4CVSS6.5AI score0.06597EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.29 views

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows a hacker to replace the address bar.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to substitute the address bar with a specially created link...

6.5CVSS5.9AI score0.00433EPSS
SaveExploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2019-6251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious...

8.1CVSS7.5AI score0.04092EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/23 2:24 p.m.8 views

CVE-2020-6158

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

4.7CVSS6.5AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/21 2:15 p.m.8 views

CVE-2020-6158

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

4.7CVSS0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/21 1:30 p.m.6 views

CVE-2020-6158

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

4.6AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/21 1:30 p.m.11 views

CVE-2020-6158

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

0.00272EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/21 12:0 a.m.5 views

Opera Mini 安全漏洞

Opera Mini is a web browser application from the Norwegian company Opera. A security vulnerability exists in Opera Mini versions prior to 52.2, which originates from a susceptibility to an address bar spoofing attack that allows a malicious page to impersonate another page and trick users into...

4.7CVSS6.4AI score0.00272EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved through improved user interface. This issue has been fixed in Safari 18 and macOS Sequoia 15. Visiting a malicious website may result in address bar spoofing...

6.5CVSS6.9AI score0.00915EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/27 10:15 p.m.5 views

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS5.8AI score0.00555EPSS
SaveExploits0References6
NVD
NVD
added 2025/01/27 10:15 p.m.9 views

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Visiting a malicious website may lead to address bar spoofing...

4.3CVSS0.00555EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/01/27 9:45 p.m.11 views

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Visiting a malicious website may lead to address bar spoofing...

5.7AI score0.00555EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/27 9:45 p.m.19 views

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Visiting a malicious website may lead to address bar spoofing...

0.00555EPSS
SaveExploits0References3
CVE
CVE
added 2025/01/27 9:45 p.m.73 views

CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

4.3CVSS7.2AI score0.00555EPSS
SaveExploits0References6Affected Software4
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.7 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.3 and iPadOS version 18.3, which originates from a visit to a...

4.3CVSS8.7AI score0.00555EPSS
SaveExploits0References4
Rows per page
Query Builder