Lucene search
+L

3 matches found

CVE
CVE
•added 2005/10/25 4:00 a.m.•62 views

CVE-2004-2491

CVE-2004-2491 describes a race condition in Opera 7.53 Build 3850 that causes the address bar to be filled before the page is loaded, enabling remote attackers to spoof the URL via window.open and location.replace and potentially facilitate phishing. Affected product: Opera Web Browser 7.53 Build...

2.6CVSS6.5AI score0.06317EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/25 12:00 a.m.•3 views

CVE-2004-2491: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks...

2.6CVSS5.7AI score0.06317EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/11 12:00 a.m.•3 views

CVE-2002-0461: Undefined Security Weakness

Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service application crash via Javascript in a web page that calls location.replace on itself, causing a loop...

5CVSS5.8AI score0.23957EPSS
SaveExploits2References1
Rows per page
Query Builder