Lucene search
K

80 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/04 12:0 a.m.1 views

The vulnerability of Firefox browser for iOS, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Firefox browser for iOS is related to information representation errors in the user interface. Exploiting this vulnerability allows an attacker to perform a spoofing attack by replacing the URL address in the location string cp...

6.4CVSS6.5AI score0.00292EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.4 views

PT-2024-4336 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations: A...

5CVSS6.5AI score0.00493EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.2 views

PT-2024-4198 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in presenting information to the user interface, which can allow a remote attacker to conduct spoofing attacks. Recommendations: At the...

5CVSS6.5AI score0.00493EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.2 views

The vulnerability of the Microsoft Outlook email client, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Outlook email client is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

7.8CVSS6.9AI score0.03219EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.4 views

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform allows attackers to perform spoofing attacks.

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform is related to errors in the user interface’s information representation during the loading of the Mono.Security.dll library. Exploiting this vulnerability allows a malicious actor to perform spoofi...

5.3CVSS6.6AI score0.00701EPSS
Exploits0References6Affected Software2
Positive Technologies
Positive Technologies
added 2023/05/30 12:0 a.m.5 views

PT-2023-22383 · Solive · Solive

Name of the Vulnerable Software and Affected Versions: SoLive versions 1.6.14 through 1.6.20 for Android Description: The issue concerns an exposed component that provides a method to modify the SharedPreference file. An attacker can exploit this to modify data in any SharedPreference file, which...

9.8CVSS6.9AI score0.00937EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.3 views

PT-2023-1767 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It allows a remote attacker to conduct spoofing attacks, affecting the system...

3.1CVSS9.3AI score0.00605EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.2 views

SUSE CVE-2006-0208

Multiple cross-site scripting XSS vulnerabilities in PHP 4.4.1 and 5.1.1, when displayerrors and htmlerrors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message...

2.6CVSS6.1AI score0.03687EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.4 views

SUSE CVE-2008-3327

Moodle 1.6.5, when displayerrors is enabled, allows remote attackers to obtain sensitive information via a direct request to 1 blog/blogpage.php and 2 course/report/stats/report.php, which reveals the installation path in an error message...

4.3CVSS6.6AI score0.01089EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.3 views

SUSE CVE-2008-5814

Cross-site scripting XSS vulnerability in PHP, possibly 5.2.7 and earlier, when displayerrors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208...

2.6CVSS6.1AI score0.01859EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.6 views

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in information representation errors in the user interface, which allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server relates to information display errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

6.8CVSS6.9AI score0.01463EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/03 12:0 a.m.3 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation relates to information representation errors in the user interface, allowing attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation relates to information display errors in the user interface. Exploiting this vulnerability allows a malicious actor to...

9CVSS7.6AI score0.01827EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.3 views

PT-2021-6340 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack. There...

4.3CVSS6.7AI score0.01576EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2021/10/12 12:0 a.m.1 views

PT-2021-4421 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft SharePoint. It is associated with errors in the user interface's information display. Exploitation of this issue m...

8.5CVSS6.9AI score0.01304EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.5 views

The vulnerability of the manager for Cockpit servers, related to errors in displaying the user interface or frames, allows a perpetrator to inject malicious code.

The vulnerability of the Cockpit server administrator relates to errors in displaying the user interface or frames. Exploiting this vulnerability allows a malicious actor to inject malicious code remotely...

5CVSS5.8AI score0.01218EPSS
Exploits0References5Affected Software3
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.2 views

PT-2021-3919 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in displaying information to the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows...

7.8CVSS7.1AI score0.03647EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2021/07/20 12:0 a.m.3 views

PT-2021-3773 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...

7.5CVSS5.4AI score0.01218EPSS
Exploits0References43
Positive Technologies
Positive Technologies
added 2021/07/19 12:0 a.m.2 views

PT-2021-4737 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows Print Spooler in Windows operating systems. This can allow a remote...

10CVSS7.6AI score0.02895EPSS
Exploits0References9
OSV
OSV
added 2021/03/25 8:15 p.m.4 views

CVE-2020-10582

A SQL injection on the /admin/displayerrors.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to execute arbitrary SQL requests including data reading and modification on the database...

9.8CVSS6.1AI score0.01555EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.5 views

Invigo Automatic Device Management SQL注入漏洞

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A SQL injection vulnerability exists in /admin/displayerrors.php in Invigo Automat...

9.8CVSS6.3AI score0.01555EPSS
Exploits1References2
Rows per page
Query Builder