CVE-2004-1877: Undefined Security Weakness

The psubmiturl value in the sample login form in the Oracle 9i Application Server 9iAS Single Sign-on Administrators Guide, Release 29.0.2 for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password...

CVE-2005-0404: Undefined Security Weakness

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...

CVE-2004-1756: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

security flaw

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window...

security flaw

Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...

security flaw

Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka t...

CVE-2004-1156

Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window...

CVE-2004-1156

CVE-2004-1156 is a window-injection vulnerability in Mozilla/Firefox prior to versions cited in the advisory. The issue allows remote spoofing by injecting content from one window into a target window in another domain, enabling a malicious site to impersonate a trusted one. The problem affects M...

CVE-2002-0315

fasttrack p2p, as used in 1 KaZaA, 2 grokster, and 3 morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header...

CVE-2002-0315: Undefined Security Weakness

fasttrack p2p, as used in 1 KaZaA, 2 grokster, and 3 morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header...

CVE-2001-0338: Undefined Security Weakness

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List CRL checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."...

CVE-2000-0517: Undefined Security Weakness

Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information...