Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Ubuntu Linux
MEDIUM 6.5
If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a…
Ubuntu Linux
MEDIUM 5.3
The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be use…
Debian Linux
HIGH 8.8
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. T…
Ubuntu Linux
HIGH 7.5
A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy. This vu…
Firefox
MEDIUM 5.3
A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser panel insid…
Firefox
HIGH 8.2
A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction.…
Firefox
MEDIUM 5.3
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible wi…
Firefox
MEDIUM 6.5
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site …
Firefox
MEDIUM 5.3
Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an International…
Debian Linux
MEDIUM 5.3
Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for do…
Enterprise Linux Aus
MEDIUM 5.3
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not d…
Firefox
MEDIUM 5.3
The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the…
Firefox
MEDIUM 5.3
Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some fon…
Firefox
MEDIUM 5.3
SVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox < 57.
Firefox
MEDIUM 5.3
Punycode format text will be displayed for entire qualified international domain names in some instances when a sub-domain triggers the punycode disp…
Debian Linux
HIGH 8.1
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed…
Enterprise Linux Desktop
HIGH 7.8
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature …
Firefox
MEDIUM 5.3
On pages containing an iframe, the "data:" protocol can be used to create a modal dialog through Javascript that will have an arbitrary domains as th…
Firefox
MEDIUM 5.3
WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavi…
Firefox
MEDIUM 5.3
A spoofing vulnerability can occur when a page switches to fullscreen mode without user notification, allowing a fake address bar to be displayed. Th…
Firefox
HIGH 7.5
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:[email protected]"), the resulting modal p…
Debian Linux
MEDIUM 5.3
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page naviga…
Firefox
HIGH 7.5
The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write a…
Enterprise Linux Desktop
HIGH 7.5
When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing…
Firefox
MEDIUM 5.3
Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name s…
Firefox
MEDIUM 5.3
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rend…
Firefox
HIGH 7.5
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the W…
Firefox
MEDIUM 5.9
A mechanism where when a new tab is loaded through JavaScript events, if fullscreen mode is then entered, the addressbar will not be rendered. This w…
Firefox
MEDIUM 5.3
Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of …
Enterprise Linux
HIGH 7.5
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerabilit…