971 matches found
Vulnerability of the Node.js software platform’s Relative Distinguished Name (RDN) component, which allows attackers to perform spoofing attacks
The vulnerability of the Relative Distinguished Name RDN component in the Node.js software platform is related to errors in the certificate validation process. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...
The vulnerability of the implementation of the method for specifying all domain names and IP addresses in the Node.js software platform allows attackers to perform spoofing attacks.
The vulnerability of the method for specifying all domain names and IP addresses on the Node.js software platform is related to errors in the X.509 certificate validation process. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
PT-2022-1679 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct spoofing...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser that comes with the post Windows 10 version of the system from Microsoft USA. Microsoft Edge suffers from a security vulnerability that exists due to incorrect handling of user-supplied data. The vulnerability can be exploited by remote attackers to trick victims...
AlmaLinux 8 : NetworkManager (ALSA-2021:4361)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4361 advisory. - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be...
Mozilla Firefox 代码问题漏洞
Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A code issue vulnerability exists in Mozilla Firefox, which stems from an error in the product's handling of JavaScript dialog boxes. A remote attacker could exploit the vulnerability to perform a spoofing attack...
Spoofing Attack
github.com/fleetdm/fleet is vulnerable to spoofing attack. The vulnerability exists due to an insecure authentication allowing an attacker to reuse the SAML response to log into the system...
PT-2022-2757 · Microsoft · Sharepoint Server +2
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...
PT-2022-1698 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct spoofing...
Mageia: Security Advisory (MGASA-2021-0506)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ROS-20220114-01
Vulnerability in Firefox browser, related to incorrect processing of user data. of user data. Exploitation of the vulnerability could allow an attacker acting remotely to mislead, by showing an incorrect origin when requesting to run a program and processing an external URL protocol Firefox brows...
PT-2022-1525 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the Windows Certificate authentication procedure, allowing an attacker to conduct spoofing attacks. It is associated with data substitution, enabling...
Debian DLA-2874-1 : thunderbird - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2874 advisory. - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash...
openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:1635-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1635-1 advisory. - An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code...
The vulnerability of Google Chrome’s Payments component, which allows a hacker to perform spoofing attacks
The vulnerability of Google Chrome’s Payments component exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to carry out spearishing attacks...
openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...
The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to carry out spoofing attacks.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
The vulnerability of the Autofill component in the Microsoft Edge browser, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.
The vulnerability of the Autofill component in the Microsoft Edge browser involves bypassing authentication through spearphishing. Exploiting this vulnerability allows attackers to carry out spearphishing attacks remotely...
Spoofing Attack
firefox:sid is vulnerable to spoofing attack. The vulnerability exists due to the high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or spoofing attack...
CVE-2021-42027
A vulnerability has been identified in SINUMERIK Edge All versions V3.2. The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and...