CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

Spoofing

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

CVE-2018-18330

The CVE-2018-18330 entry describes an Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below. Vulnerability stems from address bar spoofing in the app’s Private Browser, potentially enabling an attacker to trick a victim into visiting a mal...

CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

Apple iTunes < 12.9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209345 advisory. - Visiting a malicious website may lead to address bar spoofing CVE-2018-4440 - Visiting a malicious website may lead...

CVE-2018-12076

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC ba...

Information disclosure

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC ba...

CVE-2018-12076

CVE-2018-12076 affects Avanti Markets MarketCard. The issue is a lack of proper validation of the MarketCard UPC bar code, enabling an unauthenticated, local attacker to access funds on a customer’s balance and potentially disclose customer information by generating a copy of a bar code. The conn...

CVE-2018-12076

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC ba...

DEBIAN-CVE-2018-18357

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Code injection

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2018-18357

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

UBUNTU-CVE-2018-18348

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

December 11, 2018—KB4471328 (Security-only update)

None None...

Address bar spoofing vulnerability in multiple Apple products (CNVD-2018-24789)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes for Windows is a Windows-based media player and application. iTunes for Windows is one of the components of the Safari...

Google Chrome Omnibox Address Bar Forgery Vulnerability (CNVD-2019-01582)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in Google Chrome versions prior to 66.0.3359.106. A remote attacker can exploit this vulnerability to spoof the content of Omnibox URL bar with the help of...

Google Chrome URL Formatter Address Bar Forgery Vulnerability (CNVD-2019-01577)

Google Chrome is a web browser developed by Google, Inc. URL Formatter is one of the URL formatting components. A security vulnerability exists in URL Formatter in versions of Google Chrome prior to 71.0.3578.80, which stems from insufficient policy enforcement. The vulnerability can be exploited...

Google Chrome URL Formatter Address Bar Forgery Vulnerability

Google Chrome is a web browser developed by Google, Inc. URL Formatter is one of the URL formatting components. A security vulnerability exists in URL Formatter in versions of Google Chrome prior to 71.0.3578.80, which stems from insufficient policy enforcement. The vulnerability can be exploited...