Lucene search
+L

964 matches found

Veracode
Veracode
added 2023/08/06 11:23 p.m.33 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in URL Formatting of the library, allowing an attacker to perform domain spoofing via a maliciously crafted HTML page...

6.5CVSS6.5AI score0.00589EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/08/06 9:56 p.m.31 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the improper implementation in Cast UI of library, allowing an attacker to spoof browser UI via a maliciously crafted HTML page...

4.3CVSS6.5AI score0.00501EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2023/08/06 12:7 p.m.19 views

Spoofing Attacks

firefox is vulnerable to Spoofing Attacks. The vulnerability occurs when a website uses the window.open function to open a new window. If the new window is opened in full-screen mode, the malicious website can use the document.querySelector function to find the full-screen notification and then...

7.5CVSS6.5AI score0.00649EPSS
SaveExploits0References5Affected Software3
Veracode
Veracode
added 2023/08/06 9:15 a.m.13 views

Spoofing Attack

gitlab is vulnerable to Spoofing Attack. An attacker can spoof the protected tags, which could potentially lead a victim to download malicious code...

4.3CVSS6.9AI score0.00585EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2023/08/06 7:12 a.m.27 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in WebApp Installs, which allows an attacker to spoof the contents of the Omnibox URL bar via a maliciously crafted HTML page...

4.3CVSS6.5AI score0.00579EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/08/06 7:12 a.m.22 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Notifications of the library, which allows an attacker to spoof the contents of media notifications via a maliciously crafted HTML page...

4.3CVSS6.5AI score0.00564EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2023/08/03 12:0 a.m.5 views

Mozilla Firefox Spoofing Vulnerability (CNVD-2023-61757)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

6.5CVSS6.6AI score0.00761EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2023/08/01 2:59 p.m.25 views

CVE-2023-4053

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbird 115.2...

6.5CVSS6.9AI score0.00761EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/08/01 2:58 p.m.12 views

CVE-2023-4051

A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbird 115.2...

6.2AI score0.00649EPSS
SaveExploits0References4
CVE
CVE
added 2023/08/01 2:58 p.m.231 views

CVE-2023-4051

CVE-2023-4051: The vulnerability relates to the full screen notification being obscured by the file Open dialog, potentially enabling user confusion and spoofing. Public details across connected documents identify the issue in Mozilla products including Firefox and Thunderbird before certain vers...

7.5CVSS7.1AI score0.00649EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2023/08/01 12:0 a.m.21 views

CVE-2023-4053

A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 116, Firefox ESR 115.2, and Thunderbird 115.2...

6.5CVSS6.7AI score0.00761EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/01 12:0 a.m.4 views

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 116, which originates from a website that may obscure full-screen notifications by using a file open dialog box. This may cause user confusion...

7.5CVSS8.5AI score0.00649EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

10CVSS7.7AI score0.013EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.10 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

5CVSS5.4AI score0.00795EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.7 views

The vulnerability in the full-screen mode of the Mozilla Firefox browser, which allows a hacker to perform a spoofing attack

The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...

7.8CVSS6.8AI score0.00284EPSS
SaveExploits0References9Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.7 views

The vulnerability of Microsoft Edge browser on Android, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Microsoft Edge browser on Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

7.5CVSS6.5AI score0.00563EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/07/26 12:0 a.m.64 views

Fedora 37 : thunderbird (2023-4618764c6e)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4618764c6e advisory. Update to 102.13.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-24/ ;...

8.8CVSS7.9AI score0.99735EPSS
SaveExploits9References7
Positive Technologies
Positive Technologies
added 2023/07/21 12:0 a.m.7 views

PT-2023-3921 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in presenting information to the user interface, which can allow a remote attacker to perform a spoofing attack. Recommendations: At the...

5CVSS4.5AI score0.00795EPSS
SaveExploits0References8
OSV
OSV
added 2023/07/19 7:53 p.m.11 views

MGASA-2023-0235 Updated firefox/nss packages fix security vulnerability

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS CVE-2023-37201. Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free in...

8.8CVSS8.6AI score0.00755EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.7 views

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform allows attackers to perform spoofing attacks.

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform is related to errors in the user interface’s information representation during the loading of the Mono.Security.dll library. Exploiting this vulnerability allows a malicious actor to perform spoofi...

5.3CVSS6.6AI score0.00805EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder