Lucene search
+L

27 matches found

OSV
OSV
added 2020/07/09 3:15 p.m.4 views

CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

4.3CVSS6.7AI score0.00778EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/09 3:15 p.m.5 views

UBUNTU-CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

4.3CVSS5.8AI score0.00778EPSS
SaveExploits0References4
CVE
CVE
added 2020/07/09 2:47 p.m.76 views

CVE-2020-12412

This CVE (CVE-2020-12412) affects Mozilla Firefox prior to version 70, where navigating a tab via the History API could spoof the address bar to display an incorrect domain (https scheme, blocked port, no lock icon) while the page content is controlled. The vulnerability enables spoofing of the v...

4.3CVSS5.6AI score0.00778EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/07/09 2:47 p.m.56 views

CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

4.3CVSS4.1AI score0.00778EPSS
SaveExploits0
Hacker One
Hacker One
added 2019/02/17 11:5 a.m.13 views

Mail.ru: Раскрытие информации о совершенных операциях

History API in pandao.ru could disclosure non-personalized data about last operations...

0.3AI score
SaveExploits0
NVD
NVD
added 2014/12/25 9:59 p.m.20 views

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

5CVSS6.7AI score0.01916EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2014/12/25 9:0 p.m.28 views

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

6.7AI score0.01916EPSS
SaveExploits1References2
Rows per page
Query Builder