The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allows a hacker to perform spoofing attacks.

The vulnerability in the full-screen notification mode of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird is related to an improper limitation on the number of user interface layers or frames displayed. Exploiting this vulnerability allows a malicious actor to perfo...

PT-2024-4740 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to the Azure DevOps Server development software and is associated with the failure to take measures to protect the web page structure. Exploitation of this...

The vulnerability of the Firefox Focus browser on iOS operating systems allows a hacker to perform spoofing attacks.

The vulnerability of the Firefox Focus browser on iOS operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

PT-2024-4336 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations: A...

PT-2024-3643 · Microsoft · Dynamics 365 Customer Insights

Name of the Vulnerable Software and Affected Versions: Dynamics 365 Customer Insights affected versions not specified Description: The issue is related to the failure to properly secure the web page structure in Microsoft Dynamics 365 Customer Insights, allowing a remote attacker to conduct...

KLA67223 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge Chromium-based can be...

PT-2024-3564 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions prior to 124.0.2478.97 Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. The...

PT-2024-4983 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft SharePoint Server, where the structure of a web page is not properly protected. This could allow a remote...

The vulnerability of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc.) implemented in the command-line utility cURL, which allows attackers to perform spoofing attacks.

The vulnerability of TLS protocols HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. implemented by the command-line utility cURL is related to improper authentication of certificates. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the Mozilla Firefox browser lies in its improper limitation of the visible layers of the user interface, which allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser is related to an improper limitation on the displayed layers of the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

PT-2024-2935 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper restriction of displayed UI layers or frames, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations...

DEBIAN-CVE-2024-2629

Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of Windows operating system printing services allows attackers to perform spoofing attacks.

The vulnerability of Windows operating system printing services is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

DEBIAN-CVE-2024-1676

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

CVE-2023-47700

IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a...

The vulnerability of Windows DPAPI, a component of the Windows operating system, allows attackers to perform spoofing attacks.

The vulnerability of Windows DPAPI on the Windows operating system is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

PT-2023-7708 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows DNS server. It allows a remote attacker to conduct spoofing attacks. Recommendations...

The vulnerability of the customer feedback management application of Microsoft Dynamics 365, related to errors in information presentation on the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the customer feedback management application of Microsoft Dynamics 365 involves information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of the IsUNCPath method in Microsoft Exchange Server servers allows attackers to perform spoofing attacks.

The vulnerability of the IsUNCPath method in Microsoft Exchange Server’s mail server is related to insufficient protection of service data during NTLM authentication. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the SerializationTypeConverter class in the Microsoft Exchange Server mail server allows attackers to perform spoofing attacks.

The vulnerability of the SerializationTypeConverter class in Microsoft Exchange Server lies in the deserialization mechanism’s deficiencies, resulting from insufficient protection of service data. Exploiting this vulnerability allows attackers to perform spoofing attacks remotely...