The vulnerability in the notification interface of the fullscreen UI of Firefox browsers, Firefox ESR, and the Thunderbird email client allows attackers to perform spoofing attacks.

The vulnerability of the notification interface in the fullscreen UI mode of Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to an error that occurs when reusing existing pop-up windows. Exploiting this vulnerability allows a remote attacker to carry out spoofing...

Spoofing Attacks

apport is vulnerable to spoofing attacks. The vulnerability exists due to the mishandled filename splitting on older kernels when parsing the Apport argument...

Mozilla: Fullscreen notification bypass using popups

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when reusing existing popups; Firefox allowed them to cover the fullscreen notification UI, which possibly enabled browser spoofing attacks...

ROS-20220518-01

A vulnerability in the Mozilla Firefox browser is related to improper permission management in the application. Exploitation of the vulnerability could allow an attacker acting remotely to create a web page that Bypasses the existing browser hint and inherits top-level permissions improperly The...

GHSA-99V3-9X35-C5VF Improper Authentication in Apache WSS4J

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecifi...

GHSA-HGG6-8X62-M9GF Improper Certificate Validation in Apache CXF

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE that originates in the Javascript window.open function that leads to an address bar spoofing attack...

PT-2022-2475 · Microsoft · Active Directory Certificate Services +2

Name of the Vulnerable Software and Affected Versions: Windows LSA versions prior to the fixed version Description: The issue is related to a spoofing vulnerability in the Windows LSA component, allowing attackers to bypass authentication mechanisms. This can enable a remote attacker to perform a...

NewStart CGSL MAIN 6.02 : NetworkManager Vulnerability (NS-SA-2022-0070)

The remote NewStart CGSL host, running version MAIN 6.02, has NetworkManager packages installed that are affected by a vulnerability: - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be...

Mozilla: Fullscreen notification bypass using popups

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when reusing existing popups; Firefox allowed them to cover the fullscreen notification UI, which possibly enabled browser spoofing attacks...

Security Bulletin: Potential spoofing attack in WebSphere Application Server may affect IBM InfoSphere Global Name Management (CVE-2018-1695)

Summary There is a potential spoofing attack in WebSphere Application Server shipped as part of IBM InfoSphere Global Name Management. This also affects IBM InfoSphere Global Name Management Enterprise Name Search installations. Vulnerability Details CVEs: CVE-2018-1695 Link to security bulletin:...

Microsoft Skype for Business Server 安全漏洞

Microsoft Skype for Business Server is a secure, unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messaging, and sharing capabilities. A spoofing vulnerability exists in Microsoft Skype for Business and...

The vulnerability in the BizTalk Server BizTalk ESB Toolkit allows a attacker to perform a spoofing attack.

The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

Mozilla Firefox Security Advisories (MFSA2021-48, MFSA2021-49) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Advisories (MFSA2021-48, MFSA2021-49) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

The vulnerability of the Mozilla Firefox browser, related to the race-like status during signature verification, allows a hacker to perform a spoofing attack.

The vulnerability of the Mozilla Firefox browser is related to a race condition that occurs during the process of checking signatures. Exploiting this vulnerability allows an attacker to perform a spoofing attack by replacing the default configuration file with a malicious one...

The vulnerability of Visual Studio Code’s source editor, related to errors in information representation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

ROS-20220322-01

Vulnerability in Mozilla Thunderbird email client, related to a memory usage error upon release when processing HTML content. Exploitation of the vulnerability could allow an attacker, acting remotely, to activate the post-release usage by forcing text to be recomposed in a SVG object and executi...

The vulnerability of Microsoft Edge browser for Android, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Microsoft Edge browser for Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of Visual Studio Code’s source editor, which stems from improper handling of user data, allows attackers to perform spoofing attacks.

The vulnerability of Visual Studio Code’s source editor exists due to incorrect processing of user data. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...