590 matches found
CVE-2020-6528
Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6528
CVE-2020-6528 affects Google Chrome/iOS with a vulnerability in basic authentication that allowed spoofing the Omnibox. The issue is fixed in Chrome 84.0.4147.89 (stable channel); update to that release or newer. Other connected advisories confirm a fix in the corresponding Chromium/Chrome releas...
CVE-2020-6494
Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6494
Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
DEBIAN-CVE-2020-6494
Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
Hardcoded credentials
Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6500
Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6500
CVE-2020-6500 affects Google Chrome interstitials prior to 80.0.3987.87. The vulnerability arises from an inappropriate implementation in interstitials, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Exploitation would enable URL-bar spoofing wi...
CVE-2020-6494
CVE-2020-6494 : Google Chrome on Android prior to 83.0.4103.97 is affected by an incorrect security UI in the payments component that allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Arch Linux ASA-202006-3, Debian DSA-4714, FreeBSD vuln note, CN...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox regression (USN-4353-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4353-2 advisory. USN-4353-1 fixed vulnerabilities in Firefox. The update caused a regression that impaired the functionality of some addons. This update...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4353-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4353-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacke...
CVE-2020-6403
Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6403
Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6396
Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6396
CVE-2020-6396 corresponds to an Inappropriate implementation in Skia used by Google Chrome before 80.0.3987.87, enabling a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Debian DSA-4638-1 and related advisories) confirm the issue resides in Skia and was...
CVE-2020-6396
Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-6396
Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2019-13749
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...