CVE-2020-6526

Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

SQL Injection Vulnerability in 3D Indoor Tour System of Zhejiang Yongtuo Information Technology Co.

Zhejiang Yongtuo Information Technology Co., Ltd. is a technology provider focusing on 3D as a presentation method to solve the physical spatial relationship, and is committed to becoming the world's leading 3D visualization enterprise, providing customers and partners with comprehensive services...

CVE-2020-6526

Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Mozilla Firefox Address Bar Spoofing Vulnerability (CNVD-2020-42711)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An address bar spoofing vulnerability exists in versions of Mozilla Firefox prior to 70, which can be exploited by an attacker to cause the address bar to display the wrong domain name using the Histor...

Unauthorized Access Vulnerability in Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. There is an unauthorized access vulnerability in Feifei Movie Navigation System, which can be exploited by attackers to obtain sensitive information...

CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...

Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2020-53362)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of the Australian company Atlassian Atlassian.Atlassian JIRA Server is the server version of a defect tracking management system. The system is used to track and manage all types of issues and defects in the workplace.Atlassia...

Command Execution Vulnerability in Shenyang Huanggu District Ainong Network Technology Service Center 162100 Website Navigation

162100 website navigation is a php + MySQL development of the site navigation class website source code. Shenyang Huanggu District Ainong Network Technology Service Center 162100 URL navigation command execution vulnerabilities, attackers can use the vulnerability to obtain server privileges...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2020-35976)

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A cross-site scripting vulnerability exists in the query parameter 'fid' in the navigation.php file in Naviwebs Navigate CMS version 2.9 r1433. The vulnerability stems from the WEB...

XSS in Navigation - Search - CVE-2020-14169

The quick search component in Atlassian Jira Server and Data Center allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability. Affected versions: version 8.9.1 Fixed versions: 8.9.1 8.10.0...

Command Execution Vulnerability in Guojiz International Website Navigation System

Guojiz International Website Navigation System is a navigation system based on thinkphp. A command execution vulnerability exists in Guojiz International Website Navigation System, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in Guojiz International Web Site Navigation System (CNVD-2020-41759)

Guojiz International Website Navigation System is a navigation system based on thinkphp. There is a command execution vulnerability in the Guojiz international website navigation system that can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in Guojiz International Website Navigation System

Guojiz International Website Navigation System is a navigation system based on thinkphp. A file upload vulnerability exists in Guojiz International Website Navigation System, which can be exploited by an attacker to gain server control privileges...

chromium-browser: Insufficient policy enforcement in payments

Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

chromium-browser: Insufficient data validation in media router

Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in downloads

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in tab strip

Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

chromium-browser: Insufficient policy enforcement in navigations

Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in downloads

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

chromium-browser: Insufficient data validation in ChromeDriver

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request...