Mozilla: Fullscreen notification obscured

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks...

PT-2023-3843 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to perfor...

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and editions are affected: Microsoft Office LTSC 2021 f...

OpenDKIM 安全漏洞

OpenDKIM is a C-based DKIM sender authentication system from the OpenDKIM organization. A security vulnerability exists in OpenDKIM versions 2.10.3, 2.11.x through 2.11.0-Beta2, which stems from its inability to keep track of ordinal numbers when deleting a spoofed Authentication-Results header...

PT-2023-3841 · Microsoft · Power Apps

Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps online affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Power Apps development environment. Exploitation of this issue...

PT-2023-18712 · Western Digital · My Cloud Os 5

Name of the Vulnerable Software and Affected Versions: My Cloud OS 5 versions prior to 5.26.202 Description: An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. Recommendations: F...

The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.

The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...

The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.

The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2018-1695)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Network Manager versions 3.9 and 4.1.1. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with IBM Tivoli Netcool Configuration Manager (CVE-2018-1695)

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Netcool Configuration Manager version 6.4.1. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security...

The vulnerability of My Cloud OS, a network storage operating system, related to bypassing authentication through spoofing, allows attackers to access user data and execute arbitrary code.

The vulnerability of My Cloud OS network storage operating systems involves bypassing authentication through spoofing. Exploiting this vulnerability allows a remote attacker to gain access to user data and execute arbitrary code...

ROS-20230622-08

Mozilla Thunderbird email client vulnerability is related to a boundary error in FileReader::DoReadData when reading a file. Exploitation of the vulnerability could allow an attacker acting remotely to cause memory corruption and execute arbitrary code on the target system. memory corruption and...

UBUNTU-CVE-2023-29534

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected. This vulnerability affects...

The vulnerability of Visual Studio Code’s source editor allows attackers to perform spoofing attacks.

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

CVE-2023-33144

Visual Studio Code Spoofing Vulnerability...

PT-2023-3528 · Microsoft · Office Onenote

Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations...

PT-2023-3136 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...

CVE-2023-25748

By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 111...

CVE-2023-25730

A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

Mozilla: Potential spoof due to obscured address bar

The Mozilla Foundation Security Advisory describes this flaw as: An attacker could have positioned a datalist element to obscure the address bar...