1029 matches found
Apple iOS multiple security vulnerabilities
URL spoofing, crossite scripting, memory corruptions...
Apple Fixes Serious Flaws in iOS 5.1.1
Apple has patched several serious security bugs in iOS with the release of version 5.1.1 of the mobile operating system. The most serious of the security vulnerabilities could be used for remote code execution. The highest severity vulnerability that’s fixed in iOS 5.1.1 is a WebKit flaw that can...
CVE-2012-0674
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...
CVE-2012-0674
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...
iOS JavaScript Bug Can Lead to Spoofed Sites
Apple’s iOS thus far has proven to be fairly resistant to malware and some other forms of attack, but that doesn’t mean that it is completely in the clear. A new vulnerability discovered by a researcher at a German security firm enables an attacker to take advantage of some odd JavaScript behavio...
FreeBSD Ports: chromium
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Design/Logic Flaw
Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors...
PT-2011-4442 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.0 Description: The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL. A spoofing vulnerability exists in the way th...
Mozilla Firefox v8.x - URL & SSL Spoofing Vulnerability
Document Title: =============== Mozilla Firefox v8.x - URL & SSL Spoofing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=330 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ==================================== 330...
CVE-2011-3907
The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors...
Code injection
The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors...
CVE-2011-3907
Removed by vendor...
CVE-2011-3907
Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...
Opera < 11.60 Multiple Vulnerabilities (BEAST)
The version of Opera installed on the remote Windows host is prior to 11.60. It is, therefore, affected by multiple vulnerabilities : - An unspecified error exists that can allow URL spoofing in the address bar. CVE-2011-4010 - Top level domain separation rules are not honored for two-letter top...
Apple iPhone multiple security vulnerabilities
URL spoofing, memory corruption, protection bypass...
CVE-2011-3875
Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...
Design/Logic Flaw
Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...
Design/Logic Flaw
Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...
CVE-2011-3875
Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors...