8819 matches found
PT-2022-15609 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: The issue allows an app to potentially spoof system notifications and UI. This was addressed with a new entitlement. Recommendations: For versions prior to 12.3, update to macOS Monterey 12.3 to resol...
IBM Spectrum Copy Data Management 跨站脚本漏洞
IBM Spectrum Copy Data Management is an implementation of International Business Machines Corporation IBM to modernize, simplify, and automate data center copy management processes.A cross-site scripting vulnerability exists in IBM Spectrum Copy Data Management versions 2.2.0.0 inclusive through...
CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...
CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...
The vulnerability of PowerShell command interpreters, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.
The vulnerability of PowerShell command interpreters is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
CVE-2021-39055
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2022-25817
Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent...
CVE-2021-41657
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...
CVE-2021-41657
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...
HUAWEI EMUI/Magic UI 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a security vulnerability exists in Huawei Emui and Magic UI, which stems from improper access control of the video module. An attacker could exploit this vulnerability to...
HUAWEI EMUI 缓冲区错误漏洞
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI IFAA modules are vulnerable to an out-of-bounds read vulnerability, which can be exploited by attackers to cause a stack overflow...
Huawei EMUI和Huawei Magic UI 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Nearby modules are vulnerable to authorization issues that could be exploited by attackers to compromise availability and integrity...
HUAWEI EMUI和Honor Magic Ui 安全漏洞
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Wi-Fi modules have a privilege control vulnerability that could be exploited by attackers to obtain sensitive information...
HUAWEI EMUI 安全漏洞
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to unauthorized access, which could be exploited by attackers to compromise confidentiality...
CVE-2022-24460
Tablet Windows User Interface Application Elevation of Privilege Vulnerability...
CVE-2022-24460
Tablet Windows User Interface Application Elevation of Privilege Vulnerability...
Privilege escalation
Tablet Windows User Interface Application Elevation of Privilege Vulnerability...
CVE-2022-24460
Technical details for CVE-2022-24460 are not publicly provided in the supplied documents; no concrete affected product versions or remediation are specified. Monitor for updates.
The vulnerability of the Autofill function implementation in Google Chrome browser allows attackers to exploit and disclose protected information.
The vulnerability of the Autofill function in Google Chrome browser is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through a specially crafted HTML page...
