7 matches found
PT-2026-44133
Description SymfonyComponentHtmlSanitizerTextSanitizerUrlSanitizer::parse used by UrlSanitizer::sanitize and therefore by every HtmlSanitizer config that allows links or media accepts URLs that contain Unicode explicit-direction BiDi formatting characters: U+202A–U+202E LRE / RLE / PDF / LRO / RL...
EUVD-2004-0536
Malware in sbrugna...
SUSE CVE-2008-0367
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks...
SUSE CVE-2008-5913
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a user, or trick a...
Google Chrome Phishing Spoofing Vulnerability
Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A phishing spoofing vulnerability exists in versions of Google Chrome prior to 45.0.2454.85, which allows remote attackers to spoof content via a crafted application...
CVE-2005-0585
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...
Mozilla Thunderbird < 2.0.0.22 Multiple Vulnerabilities
Binary data 5001.prm...