Lucene search
+L

100 matches found

OSV
OSV
added 2025/11/18 6:32 p.m.7 views

GHSA-H89P-5896-F4Q8 Drupal core allows Content Spoofing

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

5.9CVSS6.8AI score0.00227EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/11/18 5:43 p.m.2 views

User Interface (UI) Misrepresentation of Critical Information

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information. An attacker who convinces a user to follow a malicious link can...

4.3CVSS6.6AI score0.00227EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/18 4:55 p.m.29 views

CVE-2025-13082

CVE-2025-13082 concerns Drupal core, where a UI misrepresentation of critical information allows content spoofing. Affected versions are Drupal core: 8.0.0–before 10.4.9, 10.5.0–before 10.5.6, 11.0.0–before 11.1.9, and 11.2.0–before 11.2.8. The vulnerability stems from the user interface displayi...

4.3CVSS6.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/18 4:55 p.m.13 views

CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/18 4:55 p.m.8 views

CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

4.3CVSS5.9AI score
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/11/07 2:52 p.m.201 views

Exploit for User Interface (UI) Misrepresentation of Critical Information in Microsoft

CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for...

7.8CVSS7.2AI score0.68864EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-10001

Malware in sbrugna...

8.8CVSS8.6AI score0.01045EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-8994

Malware in sbrugna...

7.5CVSS7.6AI score0.01196EPSS
SaveExploits0References9
Snyk
Snyk
added 2025/09/23 6:30 p.m.11 views

User Interface (UI) Misrepresentation of Critical Information

Overview Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information via improper handling of error messages passed through URL parameters. An attacker can manipulate browser-displayed error messages by injecting arbitrary content, potentially...

5.3CVSS7.1AI score0.002EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/03 8:15 p.m.9 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

5.3CVSS0.00327EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/03 12:0 a.m.19 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/26 5:15 p.m.16 views

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.2AI score0.68864EPSS
SaveExploits3References3
NVD
NVD
added 2025/08/26 5:15 p.m.36 views

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.68864EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.12 views

PT-2025-32770 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: A user interface UI misrepresentation of critical information in Microsoft Edge for Android can allow an unauthorized attacker to perform spoofing over a network...

4.3CVSS6.7AI score0.00464EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/07/30 12:0 a.m.4 views

RockyLinux 9 : thunderbird (RLSA-2025:7435)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7435 advisory. thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing...

6.4CVSS6.9AI score0.00337EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:0 a.m.8 views

RHEL 9 : thunderbird (RHSA-2025:7435)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7435 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...

6.4CVSS7AI score0.00337EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
added 2025/05/13 12:0 a.m.22 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.7AI score0.00337EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.9 views

RHEL 9 : thunderbird (RHSA-2025:4513)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:4513 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...

6.4CVSS7AI score0.00337EPSS
SaveExploits0References8
Snyk
Snyk
added 2025/04/30 4:43 p.m.4 views

User Interface (UI) Misrepresentation of Critical Information

Overview mozilla-mobile/firefox-ios is a The source code and project files for the Firefox Focus application on the iOS platform. Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information due to the truncating behavior in the location view. An...

8.5CVSS6.5AI score0.00196EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/28 12:0 a.m.20 views

RHEL 9 : thunderbird (RHSA-2025:4229)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:4229 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...

6.4CVSS7AI score0.00337EPSS
SaveExploits0References8
Rows per page
Query Builder