384 matches found
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...
RHEL 9 : thunderbird (RHSA-2025:4513)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:4513 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...
User Interface (UI) Misrepresentation of Critical Information
Overview mozilla-mobile/firefox-ios is a The source code and project files for the Firefox Focus application on the iOS platform. Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information due to the truncating behavior in the location view. An...
RHEL 9 : thunderbird (RHSA-2025:4229)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:4229 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 128.9.2 bsc1241277 CVE-2025-3522: Leak of hashed Window credentials via crafted attachment URL CVE-2025-2830: Information Disclosure of /tmp directory listing CVE-2025-3523: User Interface UI Misrepresentation of...
CVE-2025-29796
User interface ui misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...
PT-2025-14815 · Microsoft · Edge For Ios
Name of the Vulnerable Software and Affected Versions: Microsoft Edge for iOS affected versions not specified Description: The issue involves a user interface misrepresentation of critical information in Microsoft Edge for iOS, allowing an unauthorized attacker to perform spoofing over a network...
CVE-2025-21262
User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-22445 Misleading UI for undefined admin console settings in Calls causes security confusion
Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...
User Interface (UI) Misrepresentation of Critical Information
Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information via the FAQ Record component. An attacker can trigger a file download on a victim's machine...
CVE-2024-52271
User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...
CVE-2024-52270
DropBox Sign (HelloSign) is affected by a UI misrepresentation vulnerability (Content Spoofing) affecting versions through 2024-12-04. The issue is observed when printing the UI; the layered content is not flattened in print previews, potentially enabling spoofed content disclosure. Concrete deta...
CVE-2024-52270 PDF Document Spoofing in DropBox Sign(HelloSign)
User Interface UI Misrepresentation of Critical Information vulnerability in DropBox SignHelloSign allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only...
VulnCheck KEV: CVE-2024-52277
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all...
PT-2024-9243 · Documenso · Documenso
Name of the Vulnerable Software and Affected Versions: Documenso versions through 1.8.0 Documenso SaaS Hosted as of 2024-12-05 Description: The issue is related to the User Interface UI Misrepresentation of Critical Information in Documenso, allowing Content Spoofing. The displayed version does n...
VulnCheck KEV: CVE-2024-52271
User Interface UI Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not...
CVE-2024-52277
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...
CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign
User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...
CVE-2024-47045
The CVE-2024-47045 issue affects the installer for the e-Tax software (common program). The vulnerability allows a malicious DLL uploaded or introduced by an attacker to run with higher privileges than the application, due to privilege escalation in the install process (root cause described as a ...