Fujitsu iRMC security vulnerabilities

Fujitsu iRMC is an integrated remote management controller from Fujitsu Japan. A security vulnerability exists in the Fujitsu iRMC that stems from improper handling of usernames up to 16 characters in length, which could lead to Redfish/WebUI access issues...

Google Chrome Interface Spoofing

The vulnerability of Google Chrome is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to replace the user’s interface with a specially created HTML page...

Omnibox Interface Replacement

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

Vulnerability of the Storage component in Google Chrome and Microsoft

The vulnerability of the Storage component in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

Google Chrome UI Replacement

The vulnerability of Google Chrome is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Media components Google Chrome Microsoft Edge UI Replacement

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient resource management during its existence. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Omnibox Interface Replacement

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

CVE-2025-12728

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-12434

Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-32011

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application use...

EUVD-2024-29849

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application use...

CVE-2024-32011

CVE-2024-32011 affects Siemens Spectrum Power 4 (all versions

EUVD-2025-93423

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network...

KLA90002 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Race condition vulnerability in the...

KLA90004 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Incorrect boundary conditions...

CVE-2024-32011: Inclusion of Functionality from Untrusted Control Sphere

A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP12 Update 2. The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application use...

EUVD-2025-50844

Malicious code in @walletwave/ui npm...

Malicious Package

Overview @walletwave/ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @walletwave/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e6b9673bf6056f0f870d3aa6ad6c4e83ef1a3bf3b58a601dc9cae80d673390 The package @walletwave/ui was found to contain malicious code. Source: ghsa-malware 42ec23f1a72e982a80ced819057ca03a0d26999dc6b7417343456de67a35ec46...

EUVD-2025-50792

Incorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...