CVE-2017-5120

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could...

PT-2017-16320

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 61.0.3163.79 for Mac, Windows, and Linux Google Chrome version prior to 61.0.3163.81 for Android Description The issue allows a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML...

CVE-2016-5284: Improper Input Validation

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org...

PT-2016-3350

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 49.0 Firefox ESR versions 45.x prior to 45.4 Thunderbird versions prior to 45.4 Description The issue exists due to insufficient input validation, allowing a remote attacker to spoof add-on updates by leveragi...

CVE-2016-5284

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org...

Design/Logic Flaw

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3312

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

CVE-2010-3312: Undefined Security Weakness

Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: substring, without any warning to the user, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificat...

PT-2010-4724

Name of the Vulnerable Software and Affected Versions Epiphany versions 2.28 through 2.29 Description The issue allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted X.509 server certificate, as Epiphany unconditionally displays a closed-lock icon for any URL beginni...