CVE-2022-28873 Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks...

CVE-2022-28873

CVE-2022-28873 describes a vulnerability in the F-Secure SAFE browser where an attacker could abuse the Javascript window.open functionality to perform an address bar spoofing attack. The NVD entry lists a CVSS v3.1 base score of 4.3 (Medium) with attack vector Network, no privileges, user intera...

CVE-2022-28872 Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop...

CVE-2022-28872

CVE-2022-28872 describes a vulnerability in the F-Secure SAFE browser (Android variant) where a malicious site could trigger phishing via address bar spoofing if navigation fails in a loop. The issue is that the address bar is not correctly represented, enabling deception of the user. The availab...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE that originates in the Javascript window.open function that leads to an address bar spoofing attack...

F-Secure SAFE 安全漏洞

F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure. A security vulnerability exists in F-Secure SAFE. An attacker could exploit the vulnerability to conduct phishing attacks via address bar spoofing...

F5 Access for Android 信息泄露漏洞

F5 Access is a US-based company that uses VPN and optimization technologies to protect and accelerate mobile device access to enterprise networks and applications. f5 Access for Android is vulnerable to an information disclosure vulnerability that could be exploited by attackers to gain access to...

Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25160)

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previousl...

Mitsubishi Electric FA Products Authentication Bypass By Capture-Replay (CVE-2022-25159)

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote unauthenticated attacker to login to the product by replay attack. This plugin only works with...

Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25158)

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext. This...

CVE-2022-28871

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacke...

CVE-2022-28871

CVE-2022-28871 affects F-Secure Atlant; the fsicapd component used during scanning larger packages/fuzzed files can consume excessive memory and crash the scanning engine. Exploitation is described as remote. The available connected sources confirm the DoS impact but do not specify affected versi...

PT-2022-19275 · F Secure · F-Secure Atlant

Name of the Vulnerable Software and Affected Versions: F-Secure Atlant affected versions not specified Description: A Denial-of-Service DoS issue was discovered in the fsicapd component used in certain F-Secure products. When scanning larger packages or fuzzed files, the component consumes too mu...

UBUNTU-CVE-2021-44492

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

CVE-2022-28870

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails...

CVE-2022-28869

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number...

CVE-2022-28869

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number...