963 matches found
PT-2024-4476 · Mozilla +1 · Firefox For Ios +1
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 127 Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using the cpLocation attribute, potential...
VulnCheck KEV: CVE-2024-4358
Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access...
The vulnerability of the Register method in the Telerik Report Server reporting framework allows a malicious actor to access limited functions.
The vulnerability of the Register method in the Telerik Report Server reporting framework relates to bypassing authentication processes through spoofing. Exploiting this vulnerability can allow unauthorized users to gain access to limited features of the system...
WordPress Site Reviews plugin < 7.0.0 - IP Spoofing vulnerability
IP Spoofing vulnerability discovered by Sławomir Zakrzewski, Maksymilian Kubiak AFINE in WordPress Plugin Site Reviews versions 7.0.0...
Mozilla Firefox for Android Spoofing Vulnerability (CNVD-2024-23342)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...
PT-2024-3718 · Microsoft +1 · Bing Search +1
Name of the Vulnerable Software and Affected Versions: Microsoft Bing Search affected versions not specified Description: The issue is related to a data protection mechanism flaw in the Microsoft Bing Search system for the iOS operating system. This can be exploited by a remote attacker to conduc...
RHEL 7 : systemd (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary file...
AZL-40403 CVE-2024-34397 affecting package glib for versions less than 2.71.0-7
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...
Microsoft Windows Proxy Driver 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Proxy Driver. An attacker has exploited the vulnerability to perform spoofing attacks. The following products and editions are...
The vulnerability of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc.) implemented in the command-line utility cURL, which allows attackers to perform spoofing attacks.
The vulnerability of TLS protocols HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. implemented by the command-line utility cURL is related to improper authentication of certificates. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...
openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:0113-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla: Fullscreen Notification could have been hidden by select element
The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...
PT-2024-1826 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack. Recommendations: ...
CVE-2024-1548
A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...
Security Vulnerabilities fixed in Firefox ESR 115.8 — Mozilla
When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website with the victim...
PT-2024-1650 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...
The vulnerability of the optimization tool for automatic BIOS driver updates in Lenovo Vantage Service allows a hacker to execute arbitrary code with elevated privileges by bypassing the authentication process through spoofing.
The vulnerability of the optimization tool for automatic BIOS driver updates in Lenovo Vantage Service involves bypassing authentication through spoofing. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges...
The vulnerability of the password-based protection mechanism of Grub2, a loader for operating systems, allows a hacker to bypass the established access control measures.
The vulnerability of the password-based authentication mechanism of the Grub2 operating system’s loader is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability can allow an attacker to circumvent the established access control measures...
