Lucene search
+L

8810 matches found

Vulnrichment
Vulnrichment
added 2020/10/21 2:04 p.m.9 views

CVE-2020-14808

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

8.2CVSS7.3AI score0.01256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/10/21 2:04 p.m.13 views

CVE-2020-14787

Vulnerability in the Oracle Communications Diameter Signaling Router DSR product of Oracle Communications component: User Interface. Supported versions that are affected are 8.0.0.0-8.4.0.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

5.4CVSS6.1AI score0.00726EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/20 5:15 p.m.24 views

CVE-2020-7370

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions...

4.3CVSS0.00994EPSS
SaveExploits1References2
OSV
OSV
added 2020/10/20 5:15 p.m.11 views

CVE-2020-7369

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version...

4.3CVSS5.8AI score0.00994EPSS
SaveExploits1References2
NVD
NVD
added 2020/10/20 5:15 p.m.26 views

CVE-2020-7369

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version...

4.3CVSS0.00994EPSS
SaveExploits1References2
Prion
Prion
added 2020/10/20 5:15 p.m.22 views

Design/Logic Flaw

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version...

4.3CVSS4.6AI score0.00994EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/10/20 5:15 p.m.25 views

Design/Logic Flaw

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior versions...

4.3CVSS4.6AI score0.00742EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/10/20 5:15 p.m.20 views

Design/Logic Flaw

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the RITS Browser version 3.3.9 and prior versions...

4.3CVSS4.6AI score0.00994EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/10/20 5:15 p.m.17 views

Design/Logic Flaw

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions...

4.3CVSS4.6AI score0.00994EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/10/20 4:40 p.m.67 views

CVE-2020-7371

CVE-2020-7371 describes a UI misrepresentation in the address bar exploited via JavaScript timing to spoof the perceived source of content in the RITS Browser 3.3.9 and earlier. Exploitation requires visiting a site that can run JavaScript; the attacker can cause UI elements to appear as if they ...

4.3CVSS4.5AI score0.00994EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/10/20 4:40 p.m.28 views

CVE-2020-7370 Danyil Vasilenko Bolt Browser Address Bar Spooofing

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions...

4.3CVSS4.6AI score0.00994EPSS
SaveExploits1References2
CVE
CVE
added 2020/10/20 4:40 p.m.57 views

CVE-2020-7369

Summary of CVE-2020-7369 : A UI misrepresentation vulnerability in Yandex Browser’s address bar allows an attacker to obfuscate the true data source shown to the user. The issue affects Yandex Browser 20.8.3 and earlier and was fixed in 20.8.4 (Oct 1, 2020). The NVD lists a CVSS v3.1 base score o...

4.3CVSS4.5AI score0.00994EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/10/20 4:40 p.m.36 views

CVE-2020-7369 Yandex Browser Address Bar Spooofing

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Yandex Browser version 20.8.3 and prior versions, and was fixed in version...

4.3CVSS4.6AI score0.00994EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/10/20 4:40 p.m.35 views

CVE-2020-7364 UCWeb UC Browser Address Bar Spooofing

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior versions...

4.3CVSS4.6AI score0.00742EPSS
SaveExploits1References2
OSV
OSV
added 2020/10/20 3:15 p.m.7 views

CVE-2020-4755

IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188595...

5.4CVSS5.7AI score0.00561EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2020/10/20 12:00 a.m.122 views

KLA11982 Multiple vulnerabilitieis in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebRTC...

9.8CVSS9.8AI score0.02776EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/10/20 12:00 a.m.8 views

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Vulnerabilities

IBM Sterling B2B Integrator and others are products of IBM Corporation in the U.S.A. IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions, and relationships.IBM Sterling File Gateway is a suite of file transfer software.IBM Sterling File Gateway...

5.4CVSS6.2AI score0.00748EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/19 12:00 a.m.9 views

Juniper Networks Mist Cloud UI Input Validation Error Vulnerability

Juniper Networks Mist Cloud is a Juniper Networks USA platform that simplifies cloud management and helps users prevent vendor and complexity lock-in. It provides cost and utilization reporting, RBAC, management, provisioning, orchestration, monitoring and automation for servers across public and...

7.2CVSS6.8AI score0.00887EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/16 9:15 p.m.11 views

CVE-2020-1677

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...

7.2CVSS5.8AI score0.00425EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/16 12:00 a.m.11 views

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Google Chrome browser’s user interface is related to errors in the use of standard permissions. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

7.1CVSS6.9AI score0.00879EPSS
SaveExploits0References5Affected Software3
Rows per page
Query Builder