CVE-2024-43461: User Interface (UI) Misrepresentation of Critical Information

Windows MSHTML Platform Spoofing Vulnerability...

gitoxide-core does not neutralize special characters for terminals

Summary The gix and ein commands write pathnames and other metadata literally to terminals, even if they contain characters terminals treat specially, including ANSI escape sequences. This sometimes allows an untrusted repository to misrepresent its contents and to alter or concoct error messages...

CVE-2024-38197: User Interface (UI) Misrepresentation of Critical Information

Microsoft Teams for iOS Spoofing Vulnerability...

CVE-2024-7529: User Interface (UI) Misrepresentation of Critical Information

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state

...

CVE-2024-6595: User Interface (UI) Misrepresentation of Critical Information

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data...

CVE-2023-7011: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-6610: User Interface (UI) Misrepresentation of Critical Information

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-38112: User Interface (UI) Misrepresentation of Critical Information

Windows MSHTML Platform Spoofing Vulnerability...

CVE-2024-38093: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-38082: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-38313: User Interface (UI) Misrepresentation of Critical Information

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS 127...

CVE-2023-52778

In the Linux kernel, the following vulnerability has been resolved: mptcp: deal with large GSO size After the blamed commit below, the TCP sockets and the MPTCP subflows can build egress packets larger than 64K. That exceeds the maximum DSS data size, the length being misrepresent on the wire and...

CVE-2023-52778

In the Linux kernel, the following vulnerability has been resolved: mptcp: deal with large GSO size After the blamed commit below, the TCP sockets and the MPTCP subflows can build egress packets larger than 64K. That exceeds the maximum DSS data size, the length being misrepresent on the wire and...

CVE-2024-30055: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-23708: User Interface (UI) Misrepresentation of Critical Information

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

User Interface (UI) Misrepresentation Of Critical Information

chromium is vulnerable to User Interface UI Misrepresentation of Critical Information. The vulnerability is due to inappropriate implementation in the Downloads feature. This allows a remote attacker to conduct UI spoofing via a crafted URL...

User Interface (UI) Misrepresentation Of Critical Information

chromium is vulnerable to User Interface UI Misrepresentation of Critical Information. The vulnerability is due to inappropriate implementation in iOS, which allows a remote attacker to perform UI spoofing via a crafted HTML page...

BIT-TOMCAT-2022-29885 EncryptInterceptor does not provide complete protection on insecure networks

The documentation of Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentialit...

CVE-2023-50938: User Interface (UI) Misrepresentation of Critical Information

IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...