CVE-2018-12449

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

CVE-2018-12449

CVE-2018-12449 concerns DLL hijacking in the Whale browser installer up to version 0.4.3.0. Multiple sources (NVD, CVE records) describe the vulnerability and its impact as requiring local access with user interaction; CVSSv3 base score 7.8 HIGH indicating potential for high impact on confidentia...

CVE-2018-12449: Untrusted Search Path

The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking...

PT-2018-11182

Name of the Vulnerable Software and Affected Versions The Whale browser installer versions 0.4.3.0 and earlier Description The issue allows DLL hijacking, which can be exploited by an attacker. Recommendations For versions 0.4.3.0 and earlier, update to a version later than 0.4.3.0 to resolve the...

CVE-2018-12448

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

Design/Logic Flaw

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-12448

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-12448

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-12448

The CVE-2018-12448 vulnerability affects Whale Browser (pre-1.3.48.4). It causes the address bar to show only the page title when visiting non-http content, potentially enabling an attacker to display a malicious page with a fake domain name. The underlying issue is the browser not surfacing the ...

CVE-2018-12448: Improper Input Validation

Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name...

PT-2018-11181

Name of the Vulnerable Software and Affected Versions Whale Browser versions prior to 1.3.48.4 Description The issue allows an attacker to display a malicious web page with a fake domain name by exploiting the fact that the browser displays only the title of a web page on the address bar when...

Design/Logic Flaw

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-7635

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-7635

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-7635

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

CVE-2018-7635

The CVE-2018-7635 entry describes a vulnerability in Whale Browser prior to version 1.0.41.8 where the address bar shows only the page title on blank pages, omitting the actual URL. This can let an attacker display a malicious page using a fake domain name, facilitating phishing-like deception. D...

PT-2018-18174

Name of the Vulnerable Software and Affected Versions Whale Browser versions prior to 1.0.41.8 Description The issue allows an attacker to display a malicious web page with a fake domain name by exploiting the browser's behavior of displaying only the title of a web page on the address bar when...

CVE-2018-7635: Improper Input Validation

Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank page, which allows an attacker to display a malicious web page with a fake domain name...

NAVER Whale Elevation of Privilege Vulnerability

NAVER Whale is a web browser developed by NAVER Korea that supports user-defined interface. A security vulnerability exists in NAVER Whale versions prior to 1.0.40.7. An attacker can exploit the vulnerability to execute code with elevated privileges...

CVE-2018-9859

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...