https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:50:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-284 certfr-2017-avi-284 https://cve.radiocsirt.org/vuln/certfr-2017-avi-284 https://cve.radiocsirt.org/vuln/cnvd-2017-31828 cnvd-2017-31828 https://cve.radiocsirt.org/vuln/cnvd-2017-31828 https://cve.radiocsirt.org/vuln/euvd-2026-73089 EUVD-2026-73089 https://cve.radiocsirt.org/vuln/euvd-2026-73089 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5120 <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5120 https://cve.radiocsirt.org/vuln/ghsa-qmqm-g7x7-xpcx <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> https://cve.radiocsirt.org/vuln/ghsa-qmqm-g7x7-xpcx https://cve.radiocsirt.org/vuln/gsd-2017-5120 gsd-2017-5120 https://cve.radiocsirt.org/vuln/gsd-2017-5120 https://cve.radiocsirt.org/vuln/opensuse-su-2017:2482-1 <p>Security update for chromium</p> <p>Security update for chromium</p> https://cve.radiocsirt.org/vuln/opensuse-su-2017:2482-1 https://cve.radiocsirt.org/vuln/rhsa-2017:2676 <p>chromium-browser: use after free in pdfium chromium-browser: heap buffer overflow in webgl chromium-browser: heap buffer overflow in skia chromium-browser: memory lifecycle issue in pdfium chromium-browser: type confusion in v8 chromium-browser: type confusion in v8 chromium-browser: use of uninitialized value in skia chromium-browser: bypass of content security policy in blink chromium-browser: use of uninitialized value in skia chromium-browser: potential https downgrade during redirect navigation</p> <p>chromium-browser: use after free in pdfium chromium-browser: heap buffer overflow in webgl chromium-browser: heap buffer overflow in skia chromium-browser: memory lifecycle issue in pdfium chromium-browser: type confusion in v8 chromium-browser: type confusion in v8 chromium-browser: use of uninitialized value in skia chromium-browser: bypass of content security policy in blink chromium-browser: use of uninitialized value in skia chromium-browser: potential https downgrade during redirect navigation</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2676 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5120 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt, Ubuntu:18.04:LTS: chromium-browser</p> <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt, Ubuntu:18.04:LTS: chromium-browser</p> <p>Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial &#34;www.&#34; substring).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5120