Lucene search
+L

20604 matches found

NVD
NVD
added 2025/09/03 8:15 p.m.11 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

5.3CVSS0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/03 5:15 p.m.7 views

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS6.5AI score
SaveExploits0References2
OSV
OSV
added 2025/09/03 5:15 p.m.2 views

DEBIAN-CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.6AI score0.00293EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/03 5:15 p.m.7 views

CVE-2025-9865

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS6.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/03 4:17 p.m.18 views

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00293EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/03 4:17 p.m.2 views

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00293EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/03 4:17 p.m.545 views

CVE-2025-9865

CVE-2025-9865 : In Google Chrome on Android, prior to version 140.0.7339.80, an inappropriate implementation in Toolbar allows a remote attacker to induce a user, via crafted HTML and specific UI gestures, to perform domain spoofing. Impact is described as a Chromium-style vulnerability with pote...

5.4CVSS5.9AI score0.00255EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/09/03 1:15 p.m.9 views

CVE-2024-13066

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

4.3CVSS0.00179EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/03 1:05 p.m.11 views

CVE-2024-13066

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

4.3CVSS5.8AI score0.00179EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/03 1:05 p.m.29 views

CVE-2024-13066

CVE-2024-13066 describes an improper restriction of rendered UI layers or frames in Akinsoft LimonDesk (affected: s1.02.14 up to

4.3CVSS5.8AI score0.00179EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/03 11:44 a.m.3 views

Improper Restriction of Rendered UI Layers or Frames

Overview Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames via the iframe element. An attacker can execute unauthorized scripts in the context of a user's browser by embedding the application within a malicious frame. Note: This is only...

3.1CVSS7AI score0.00347EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/03 6:15 a.m.10 views

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

6.8CVSS5.8AI score0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/03 6:15 a.m.9 views

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

6.8CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 6:05 a.m.30 views

CVE-2025-21032

CVE-2025-21032 affects Samsung One UI Home prior to SMR Sep-2025 Release 1, with an improper access control risk that can allow a physical attacker to bypass Kiosk mode under limited conditions. Root cause is access-control weakness in One UI Home, as described across multiple sources (Red Hat ad...

6.8CVSS5.9AI score0.00166EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/03 6:05 a.m.4 views

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

5.9CVSS5.9AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/03 6:05 a.m.45 views

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

5.9CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 6:05 a.m.27 views

CVE-2025-21029

CVE-2025-21029 concerns Samsung Mobile/Samsung System UI prior to SMR Sep-2025 Release 1. The issue is described as improper handling of insufficient permissions in System UI, enabling local attackers to send arbitrary replies to messages from the cover display. Connected sources confirm affected...

4CVSS6AI score0.00108EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/03 12:00 a.m.22 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

0.00327EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.11 views

PT-2025-35683

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Sep-2025 Release 1 Description: Improper handling of insufficient permission in System UI allows local attackers to send arbitrary replies to messages from the cover display. Recommendations: Update System UI t...

4CVSS6.1AI score0.00108EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.7 views

PT-2025-44692

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue involves an incorrect security user interface in the Omnibox. Recommendations At the moment,...

8.8CVSS6.2AI score0.06624EPSS
SaveExploits2References91
Rows per page
Query Builder