SUSE CVE-2005-0593

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via 1 a web site that does not finish loading, which shows the lock of the previous site, 2 a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake ...

CVE-2018-5354

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...

CVE-2016-1694

Removed by vendor...

CVE-2016-1694

CVE-2016-1694 affects Google Chrome before 51.0.2704.63, where browser/browsing_data/browsing_data_remover.cc deletes HPKP pins during cache cleanup. This undermines certificate pinning, enabling remote attackers to spoof websites by presenting a valid certificate from any trusted CA. The public ...

CVE-2015-7211

CVE-2015-7211 (Mozilla Firefox): Firefox before 43.0 mishandles the # character in data: URIs, allowing remote attackers to spoof websites via unspecified vectors. Affected: Mozilla Firefox before 43.0. Root cause: parsing/handling issue in data: URIs leading to spoofing. Impact: potential user d...

Design/Logic Flaw

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted...

CVE-2004-1314

Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different...

CVE-2004-1160

CVE-2004-1160 involves Netscape 7.x to 7.2 (and possibly other versions) where a remote attacker can spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain (window injection). The connected OpenVAS/Nessus/FreeBSD Vu...

browser.bookmarks.txt

Date: Sun, 9 May 1999 17:34:10 +0300 From: Georgi Guninski To: [email protected] Subject: Bookmarks security vulnerabilities in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 There is a design flaw in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 guess all 4....