6542 matches found
CVE-2018-12382
The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before the loaded domain name, scrolling the loaded domain out of view to the right. This can lead to user confusion. This vulnerability only affects Firefox for...
October 18, 2018—KB4462925 (Preview of Monthly Rollup)
None None...
CVE-2018-17475
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2018-14664
A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the...
Cross site scripting
A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the...
CVE-2018-14664
A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the...
October 9, 2018—KB4462929 (Monthly Rollup)
None None...
October 9, 2018—KB4463104 (Security-only update)
None None...
October 9, 2018—KB4462923 (Monthly Rollup)
None None...
Cross site scripting
PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...
CVE-2018-16453
PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...
CVE-2018-16453
PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar...
PT-2018-13578 · Php Scripts Mall · Php Scripts Mall Domain Lookup Script
Name of the Vulnerable Software and Affected Versions: PHP Scripts Mall Domain Lookup Script version 3.0.5 Description: The issue allows for cross-site scripting XSS in the search bar. Recommendations: For PHP Scripts Mall Domain Lookup Script version 3.0.5, update the script to a version that...
Microsoft Office: Information Bar
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeinformationbar.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Information Bar Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
Security Bulletin: Vulnerability in RC4 stream cipher affects Rational Functional Tester's Extension for Terminal-based Applications (CVE-2015-2808)
Summary The RC4 "Bar Mitzvah" attack may affect "Extension for Terminal-based Applications" a.k.a FTE that are shipped with Rational Functional Tester. Vulnerability Details CVEID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote...
Google Chrome Address Bar Spoofing Vulnerability (CNVD-2018-20745)
Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 64.0.3282.119. A remote attacker can exploit this vulnerability to spoof the content of Omnibox URL bar with the help...
September 26, 2018—KB4458469 (OS Build 17134.320)
None None...
CVE-2018-6119
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...