CVE-2025-62224

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

CVE-2025-62224

CVE-2025-62224 affects Microsoft Edge for Android. The issue is a UI misrepresentation of critical information in the browser, enabling a network-based spoofing scenario by an authorized attacker. Documented impact is spoofing of the user interface with low to medium severity in various sources; ...

MAL-2026-193 Malicious code in cko-ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd7dceb0840c7e96ac7bbc186b43c5a28941546823b4a13888aad0870a5aaa9 The package cko-ui-toolkit was found to contain malicious code. Source: ghsa-malware 06a8bb4e74769e572fe928f5f3fa63fb6ebda995375148b063d1730c43c4dc06...

Malicious code in cko-ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd7dceb0840c7e96ac7bbc186b43c5a28941546823b4a13888aad0870a5aaa9 The package cko-ui-toolkit was found to contain malicious code. Source: ghsa-malware 06a8bb4e74769e572fe928f5f3fa63fb6ebda995375148b063d1730c43c4dc06...

CVE-2025-31962

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods...

CVE-2019-12139

An XSS issue was discovered in the Admin UI in eZ Platform 2.x. This affects ezplatform-admin-ui 1.3.x before 1.3.5 and 1.4.x before 1.4.4, and ezplatform-page-builder 1.1.x before 1.1.5 and 1.2.x before 1.2.4...

CVE-2025-1349

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

CVE-2025-31962 HCL BigFix IVR is impacted by an insufficient session expiration vulnerability

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods...

GHSA-PG5P-WWP8-97G8 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2023-29002 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2023-34242 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GHSA-R7WR-4W5Q-55M6 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2024-6484 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, jupyter-base-notebook...

CVE-2023-30851 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GHSA-2H44-X2WX-49F4 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2024-6484 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, rancher-api-ui...

GHSA-9MVJ-F7W8-PVH2 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, rancher-api-ui...

HCL BigFix IVR 安全漏洞

HCL BigFix IVR is a vulnerability fixing tool from HCL India. A security vulnerability exists in HCL BigFix IVR version 4.2 that stems from insufficient session expiration of the Web UI authentication component, which could lead to unauthorized access to protected API endpoints...

Microsoft Edge for Android 安全漏洞

Microsoft Edge for Android is a browser for Android from Microsoft Corporation, USA. A security vulnerability exists in Microsoft Edge for Android that stems from improper representation of critical information in the user interface, which could lead to a network spoofing attack...