Google Chrome Omnibox Spoofing Vulnerability (CNVD-2018-20141)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 63.0.3239.84, which stems from insufficient policy enforcement. The vulnerability can be exploited by remote attacker...

CVE-2017-15424

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

Design/Logic Flaw

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

CVE-2017-15425

Removed by vendor...

CVE-2017-15424

Removed by vendor...

CVE-2018-1999042

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL...

CVE-2018-1999042

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL...

CVE-2018-1999042

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL...

CVE-2018-1999042

CVE-2018-1999042 affects Jenkins up to version 2.137 and earlier (also 2.121.2 and earlier). The vulnerability resides in XStream2.java during deserialization of a java.net.URL instance, which allows an attacker to coerce Jenkins into resolving a domain name. The available sources describe the ro...

CVE-2018-1999042

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL...

CVE-2018-1999042: Deserialization of Untrusted Data

A vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL...

PT-2018-15221

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.137 Jenkins versions 2.121.2 and earlier Description A vulnerability exists in XStream2.java that allows attackers to have Jenkins resolve a domain name when deserializing an instance of java.net.URL. Recommendation...

Samba Denial of Service Vulnerability (CNVD-2019-08284)

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A denial of service...

The vulnerability of the DNS server testing tool dnslint lies in its lack of protection for website structure, allowing attackers to execute arbitrary code.

The vulnerability of the DNS server testing tool dnslint exists because measures are not taken to protect the structure of web pages when generating reports. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file that defines the rules for...

DEBIAN-CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache...

Design/Logic Flaw

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

UBUNTU-CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache...

CVE-2018-12448

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-12448: Improper Input Validation

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

PT-2018-11181

Name of the Vulnerable Software and Affected Versions Whale Browser versions prior to 1.3.48.4 Description The issue allows an attacker to display a malicious web page with a fake domain name by exploiting the fact that the browser displays only the title of a web page on the address bar when...