1029 matches found
CVE-2020-26977
CVE-2020-26977 affects Firefox for Android; the flaw allowed an attacker to control the content of a tab by connecting to a website through an unresponsive port, while the URL bar showed the original domain. The issue is limited to Firefox for Android and Firefox
CVE-2020-4840
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious W...
Mozilla Firefox Security Advisories (MFSA2020-54, MFSA2020-56) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
CVE-2020-4840
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious W...
CVE-2020-15733 URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)
An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...
CVE-2020-9945
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, Safari 14.0.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2020-16031
Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
Authorization
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
CVE-2020-15984
CVE-2020-15984 affects Google Chrome on iOS before 86.0.4240.75, where the Omnibox (URL bar) does not enforce policies correctly, enabling a remote attacker to spoof the Omnibox via a crafted URL. Several advisories (Debian, FreeBSD, Arch) indicate the fixed version is 86.0.4240.75 or later, impl...
CVE-2020-15984
Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted URL...
CVE-2020-15665
Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect URL being shown when used in conjunction with other unexpected browser behaviors. This vulnerability affects Firefox 80...
Design/Logic Flaw
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6565
CVE-2020-6565 affects Google Chrome on iOS (Omnibox/URL bar). Insecure/improper Omnibox handling allowed a remote attacker to spoof the URL bar contents using a crafted HTML page. Root cause: inappropriate Omnibox implementation. Impact: spoofed UI; potential user deception. Remediation: update t...
CVE-2020-6565
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-4653
Summary: CVE-2020-4653 affects IBM Planning Analytics 2.0.x. The vulnerability is an open redirect in Planning Analytics (Workspace) that could allow a remote attacker, by enticing a user to visit a crafted site, to spoof the URL and redirect to a malicious site, potentially exposing sensitive in...