CVE-2020-9945

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, Safari 14.0.1. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9942

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, Safari 13.1.2. Visiting a malicious website may lead to address bar spoofing...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9945

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, Safari 14.0.1. Visiting a malicious website may lead to address bar spoofing...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, Safari 13.1.2. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9942

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, Safari 13.1.2. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9987

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing...

Design/Logic Flaw

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9993

CVE-2020-9993 describes an issue where Safari/iOS/watchOS/iPadOS UI handling could allow address bar spoofing when visiting a malicious site. The vulnerability is addressed by updates: watchOS 7.0, Safari 14.0, iOS 14.0, and iPadOS 14.0. The description does not specify exploit details beyond UI-...

CVE-2020-9987

CVE-2020-9987 is an Apple Safari vulnerability describing an inconsistent UI issue that allowed address bar spoofing when visiting a malicious site. Connected sources confirm the root cause as a state-management/UI handling problem and indicate Safari 14.0 (Big Sur era) patching the flaw; exploit...

CVE-2020-9987

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9942

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, Safari 13.1.2. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-9942

CVE-2020-9942 concerns an inconsistent user interface issue in Safari/WebKit on macOS that could allow address bar spoofing. The initial document states the issue is fixed in macOS Big Sur 11.0.1 and Safari 13.1.2. Connected documents corroborate: Red Hat/Apple entries describe the same CVE with ...

Security Misconfiguration

Google Chrome is vulnerable to security misconfiguration. The vulnerability exist because of Incorrect handling of a confusable character in Omnibox in Google Chrome which allows an attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

URL Bar Spoofing

Incorrect handling of a confusable character in Omnibox in Google Chrome allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Arachnys Cabot Cross-Site Scripting Vulnerability

Arachnys Cabot is a free, open source, self-hosted infrastructure monitoring platform for Arachnys individual developers. The platform provides a web-based monitoring page to monitor the status of services such as Redis, ElasticSearch cluster, etc., and can notify developers of anomalies via emai...

Address bar spoofing in Opera Mini for Android – Opera Security Advisories

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing...

The vulnerability of the Address Bar Handler component in the Yandex Browser for Android allows attackers to perform spoofing attacks.

The vulnerability of the Address Bar Handler component in the Yandex Browser for Android is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Mozilla FireFox Information Disclosure Vulnerability (CNVD-2021-04827)

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. FireFox Windows suffers from an information disclosure vulnerability that originates from searching for a single word from the address bar resulting in an mDNS request being...