Lucene search
K

6 matches found

CNVD
CNVD
added 2018/04/18 12:0 a.m.1 views

Hatena Bookmark App for iOS Address Bar Spoofing Vulnerability

Hatena Bookmark App for iOS is a bookmarking application from Hatena Japan. The program is able to save and share Japanese news, blogs or websites. A security vulnerability exists in Hatena Bookmark App versions 3.0 through 3.70 for iOS-based platforms. A remote attacker can exploit the...

6.5CVSS6.8AI score0.00243EPSS
Exploits0References1
OSV
OSV
added 2018/04/16 2:29 p.m.2 views

CVE-2018-0560

Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display...

6.5CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2018/04/16 1:0 p.m.12 views

CVE-2018-0560

Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display...

6.1AI score0.00243EPSS
Exploits0References2
CVE
CVE
added 2018/04/16 1:0 p.m.43 views

CVE-2018-0560

Hatena Bookmark App for iOS (versions 3.0–3.70) contains an address bar spoofing vulnerability. A remote attacker could forge the address bar contents, potentially enabling phishing-like deception. Affected component: iOS app UI/URL display logic; root cause described as an address bar spoofing f...

6.5CVSS6AI score0.00243EPSS
Exploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2018/04/10 4:39 a.m.1 views

Hatena Bookmark App for iOS contains an address bar spoofing vulnerability

Overview Hatena Bookmark App for iOS provided by Hatena Co., Ltd. contains a vulnerability where the address bar displays a different URL than the URL that is being accessed. Kenichiro Wakitani reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

6.5CVSS6.4AI score0.00243EPSS
Exploits0References5
OwnCloud
OwnCloud
added 2013/04/02 11:42 a.m.44 views

Server: Multiple XSS vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in ownCloud 5.0.0 allow remote attackers to inject arbitrary web script or HTML via the "newname" POST parameter to renameTag.php in /apps/bookmarks/ajax/ Commits: 1c63eb1 stable5 Risk: Medium Note: Successful exploitation of this stored XSS...

4.3CVSS5.2AI score0.00296EPSS
Exploits0Affected Software1
Rows per page
Query Builder