Lucene search
+L

161 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•6 views

CVE-2021-44749: Improper Neutralization of Input During Web Page Generation

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

9.6CVSS8.6AI score0.00817EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/06 12:00 a.m.•7 views

CVE-2021-44748: Improper Neutralization of Input During Web Page Generation

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

6.1CVSS6.4AI score0.00546EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/06 12:00 a.m.•5 views

PT-2022-12220

Name of the Vulnerable Software and Affected Versions F-Secure SAFE browser protection affected versions not specified Description A vulnerability was discovered in F-Secure SAFE browser protection due to improper URL handling, which can be triggered to cause universal cross-site scripting throug...

9.6CVSS0.00817EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2022/03/03 12:00 a.m.•45 views

Kaspersky Total Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.5AI score0.02601EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/16 11:15 a.m.•39 views

CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.6CVSS0.00729EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/16 11:15 a.m.•11 views

CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.6CVSS5.8AI score0.00729EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/12/16 11:15 a.m.•20 views

CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.3CVSS5.8AI score0.00729EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/16 11:15 a.m.•34 views

Spoofing

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.3CVSS4.5AI score0.00729EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/16 10:58 a.m.•38 views

CVE-2021-40835 URL Address Bar Spoofing in F-Secure SAFE Browser for iOS

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.6CVSS4.9AI score0.00729EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/16 10:58 a.m.•87 views

CVE-2021-40835

CVE-2021-40835 affects F-Secure Safe Browser for iOS. The issue is an URL address bar spoofing vulnerability where a specially crafted URL with an extremely long username part can mislead users into thinking content comes from a valid domain. The described root cause is that the username portion ...

4.6CVSS4.4AI score0.00729EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•10 views

CVE-2021-40835: Undefined Security Weakness

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

4.6CVSS5.8AI score0.00729EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•20 views

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from the Finnish company F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-Secure Safe Browser for iOS that stems from a URL address bar spoofing vulnerability...

4.6CVSS5.2AI score0.00729EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/16 12:00 a.m.•10 views

PT-2021-22971

Name of the Vulnerable Software and Affected Versions Safe Browser for iOS affected versions not specified Description A URL address bar spoofing issue was discovered. When a user clicks on a specially crafted malicious URL, they may be tricked into thinking the content comes from a valid domain,...

4.6CVSS0.00729EPSS
SaveExploits0References5
NVD
NVD
•added 2021/12/10 2:15 p.m.•33 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS0.00751EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/12/10 2:15 p.m.•22 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.9AI score0.00751EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/12/10 1:38 p.m.•50 views

CVE-2021-40834 User interface Spoofing in F-Secure SAFE browser for Android

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS4.9AI score0.00751EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/10 1:38 p.m.•75 views

CVE-2021-40834

CVE-2021-40834 is an UI overlay vulnerability in F‑Secure SAFE Browser for Android. A specially crafted URL can cause the browser to go full screen and hide the user interface, enabling a spoofing attack by a remote attacker. Documented impact is spoofing; CVSS v3.1 vector indicates Network attac...

4.3CVSS4.5AI score0.00751EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/12/10 12:00 a.m.•22 views

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from the Finnish company F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-secure SAFE Browser for Android, which stems from the SAFE Browser going full-screen and...

4.3CVSS5.3AI score0.00751EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/10 12:00 a.m.•9 views

CVE-2021-40834: Improper Restriction of Rendered UI Layers or Frames

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.9AI score0.00751EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/10 12:00 a.m.•11 views

PT-2021-22970

Name of the Vulnerable Software and Affected Versions F-secure SAFE Browser for Android affected versions not specified Description A user interface overlay issue was found, allowing a remote attacker to perform a spoofing attack when a user clicks on a specially crafted URL, causing the browser ...

4.3CVSS0.00751EPSS
SaveExploits0References5
Rows per page
Query Builder