Lucene search
+L

8790 matches found

CVE
CVE
added 2024/12/04 11:25 a.m.72 views

CVE-2024-52269

The CVE-2024-52269 entry (and related CVE-2024-52276) concerns DocuSign UI where hidden content rendered after signing can be misrepresented, enabling content spoofing. Technical details in connected sources show the issue affects DocuSign up to 2024-12-04 and involves a misrendering of layered c...

8.2CVSS6.4AI score0.00281EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/04 11:25 a.m.24 views

CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affects DocuSign: through 2024-12-04...

8.2CVSS6.6AI score0.00281EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/04 10:16 a.m.8 views

CVE-2024-52277 PDF Document Spoofing in DocuSeal

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

8.2CVSS6.3AI score0.00208EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/12/04 10:16 a.m.31 views

CVE-2024-52277 PDF Document Spoofing in DocuSeal

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

8.2CVSS0.00208EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/04 10:16 a.m.8 views

CVE-2024-52277 PDF Document Spoofing in DocuSeal

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed e.g. via Google Chrome - Examine the print preview: Will render the vulnerability only, not all laye...

8.2CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2024/12/04 10:13 a.m.31 views

CVE-2024-52276 PDF Document Spoofing in DocuSign

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which i...

8.2CVSS0.00353EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/12/04 10:13 a.m.13 views

CVE-2024-52276 PDF Document Spoofing in DocuSign

User Interface UI Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not show the layer flattened version, which i...

8.2CVSS6.1AI score0.00353EPSS
SaveExploits0References4
CVE
CVE
added 2024/12/04 10:13 a.m.77 views

CVE-2024-52276

CVE-2024-52276 is a DocuSign UI-focused vulnerability described as a misrepresentation of critical information that enables content spoofing. The affected behavior is that the layer-flattened version of the document is not shown in various UI paths (Print, combined download, uncombined download),...

8.2CVSS6.1AI score0.00353EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/04 7:15 a.m.9 views

CVE-2024-45717

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

4.8CVSS5.8AI score0.0037EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/04 7:15 a.m.28 views

CVE-2024-45717

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

7CVSS0.0037EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/04 7:05 a.m.103 views

CVE-2024-45717

CVE-2024-45717 affects SolarWinds Platform with an XSS vulnerability in the UI (search and node information). The issue requires authentication and user interaction. Connected sources indicate this is a versioned flaw for SolarWinds Platform (NVD/NVD-like entries) and, per Nessus, applies to 2024...

7CVSS6.7AI score0.0037EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/04 7:05 a.m.20 views

CVE-2024-45717 SolarWinds Platform Cross- Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

7CVSS6.2AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/04 7:05 a.m.32 views

CVE-2024-45717 SolarWinds Platform Cross- Site Scripting Vulnerability

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction...

7CVSS0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/04 12:00 a.m.11 views

SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from susceptibility to a cross-site scripting attack that affects the search and node...

7CVSS5.8AI score0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/04 12:00 a.m.9 views

Docusign API 安全漏洞

The Docusign API is a secure and extensible API from Docusign, Inc. A security vulnerability exists in the Docusign API that stems from misrepresentation of critical information in the user interface leading to content spoofing...

8.2CVSS6.3AI score0.00353EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/04 12:00 a.m.10 views

Docusign API 安全漏洞

The Docusign API is a secure and scalable API from Docusign. A security vulnerability exists in the Docusign API that stems from misrepresentation of critical information in the user interface leading to content spoofing...

8.2CVSS6.5AI score0.00281EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/04 12:00 a.m.12 views

SolarWinds Platform 2024.0 < 2024.4.1 XSS

The version of SolarWinds Platform installed on the remote host is prior to 2024.4.1. It is, therefore, affected by a vulnerability as referenced in the solarwindsplatform202441 advisory. - The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information...

7CVSS5.5AI score0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/04 12:00 a.m.10 views

DocuSeal 安全漏洞

DocuSeal is an open source platform from DocuSeal, Inc. that provides secure and efficient digital document signing and processing. A security vulnerability exists in DocuSeal versions prior to 1.8.1 that stems from a user interface critical information misrepresentation vulnerability that allows...

8.2CVSS6.3AI score0.00208EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/04 12:00 a.m.14 views

PT-2024-35140 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue concerns a User Interface UI Misrepresentation of Critical Information vulnerability that allows Content Spoofing. Specifically, the SaaS AI assistant ignores hidden content that is...

8.2CVSS6.9AI score0.00281EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/12/04 12:00 a.m.25 views

PT-2024-35146 · Docusign · Docusign

Name of the Vulnerable Software and Affected Versions: DocuSign versions through 2024-12-04 Description: The issue is related to a User Interface UI Misrepresentation of Critical Information vulnerability, which allows Content Spoofing. This means that the displayed version of a document does not...

8.2CVSS6.8AI score0.00353EPSS
SaveExploits0References11
Rows per page
Query Builder