58 matches found
PT-2022-22162 · Dell · Dell Hybrid Client
Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue is related to a Regular Expression Denial of Service in the UI. An adversary with WMS group admin access could potentially exploit this, leading to temporary denial-of-service...
in kcal-app/kcal
Description Sensitive Data can be exposed even after logouting the application due to ui wrong action Proof of Concept 1 login to the application dashboard http://demo.kcal.cooking/ 2 Goto Any pages recipes,foods 3 Click logout 4 Click browser back button Application structure exposed we can stil...
Code injection
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to convert a Files Drop link to a federated share. This causes an issue on the UI side of the sharing user. When the sharing user opens the sharing panel and...
CVE-2021-32655 Files Drop public link can be added as federated share
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to convert a Files Drop link to a federated share. This causes an issue on the UI side of the sharing user. When the sharing user opens the sharing panel and...
CVE-2021-32655
The CVE-2021-32655 entry concerns Nextcloud Server: in versions prior to 19.0.11, 20.0.10, and 21.0.2 an attacker could convert a Files Drop link into a federated share. When the sharing user opens the panel and removes the Create privileges from this unexpected share, the system silently grants ...
Files Drop public link can be added as federated share
None...
CVE-2020-9942
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, Safari 13.1.2. Visiting a malicious website may lead to address bar spoofing...
CVE-2020-9987
CVE-2020-9987 is an Apple Safari vulnerability describing an inconsistent UI issue that allowed address bar spoofing when visiting a malicious site. Connected sources confirm the root cause as a state-management/UI handling problem and indicate Safari 14.0 (Big Sur era) patching the flaw; exploit...
CVE-2018-4391
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofi...
CVE-2018-4390
The CVE affects Apple devices via Message handling: an inconsistent UI state (UI spoofing) when processing a maliciously crafted text message. Root cause cited as improved state management in related Apple advisories. Affected products/versions include iOS 12.1 and earlier iOS 12.x, watchOS 4.3, ...
About the security content of Safari 13.0.5
About the security content of Safari 13.0.5 This document describes the security content of Safari 13.0.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Design/Logic Flaw
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing...
CVE-2019-13717
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page...
CVE-2018-4389
CVE-2018-4389 is an UI-related inconsistency in macOS Mail (and related components) that was mitigated by updating macOS Mojave to 10.14.1. The issue affects macOS versions prior to 10.14.1, with an improved state-management fix applied in the Mojave 10.14.1 release. The vulnerability is describe...
[ASA-201812-2] chromium: multiple issues
Arch Linux Security Advisory ASA-201812-2 ========================================= Severity: Critical Date : 2018-12-08 CVE-ID : CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343...
March 8, 2018—KB4092077 (OS Build 15063.936)
None None...
chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
