Lucene search
+L

20 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•0 views

CVE-2026-47782: Insufficient UI Warning of Dangerous Operations

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor...

4.6CVSS5.7AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•23 views

PT-2026-6785

Name of the Vulnerable Software and Affected Versions Xmind affected versions not specified Description The software contains a flaw related to insufficient UI warnings when handling attachments. This could lead to remote code execution. There is no information about the number of potentially...

7.8CVSS5.9AI score0.00326EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/23 9:24 p.m.•26 views

CVE-2025-14412

CVE-2025-14412 affects Soda PDF Desktop. The vulnerability arises from how XLS files are processed, allowing the execution of dangerous scripts without user warnings. An attacker can abuse this to achieve remote code execution in the attacker’s current user context when a user opens a malicious X...

7.8CVSS7.8AI score0.002EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•23 views

PT-2025-50781

Name of the Vulnerable Software and Affected Versions PDFsam Enhanced affected versions not specified Description A flaw exists in PDFsam Enhanced related to the processing of XLS files. This allows a remote attacker to execute arbitrary code on affected systems. User interaction is required,...

7CVSS7.1AI score0.00262EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/07/10 5:18 p.m.•9 views

CVE-2025-33054

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS6.2AI score0.00937EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/07/08 2:00 p.m.•16 views

Remote Desktop Spoofing Vulnerability

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS6.6AI score0.00937EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•2 views

CVE-2025-33054: Insufficient UI Warning of Dangerous Operations

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS5.8AI score0.00937EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/13 12:00 a.m.•2 views

CVE-2025-49585: Insufficient UI Warning of Dangerous Operations

XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10.1, when an attacker without script or programming right creates an XClass definition in XWiki requires edit right, and that same document is later edited by a user with script,...

8.6CVSS5.7AI score0.00428EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•1 views

CVE-2024-49054: Insufficient UI Warning of Dangerous Operations

Microsoft Edge Chromium-based Spoofing Vulnerability...

4.3CVSS5.5AI score0.00578EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•1 views

CVE-2024-21336: Insufficient UI Warning of Dangerous Operations

Microsoft Edge Chromium-based Spoofing Vulnerability...

2.5CVSS5.7AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/11 12:00 a.m.•1 views

CVE-2022-41904: Insufficient UI Warning of Dangerous Operations

Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, events encrypted using Megolm for which trust could not be established did not get decorated accordingly with warning shields. Therefore a malicious homeserver could inject messages into the...

6.5CVSS5.7AI score0.00446EPSS
SaveExploits0References2
ICS
ICS
•added 2021/02/04 12:00 a.m.•75 views

Luxion KeyShot (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Luxion Equipment: KeyShot products Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Insufficient UI Warning of Dangerous Operations, Untrusted Pointer Dereference, Path Traversal 2. UPDATE INFORMATION This...

7.8CVSS8.4AI score0.02934EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
•added 2020/04/30 12:00 a.m.•29 views

LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

7.8CVSS1.8AI score0.00832EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/27 12:00 a.m.•2 views

CVE-2019-13521: Insufficient UI Warning of Dangerous Operations

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

7.8CVSS7.2AI score0.05571EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2019/08/27 12:00 a.m.•34 views

Adobe Photoshop JSX File ExtendScript app.system Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

7.8CVSS1.8AI score0.14215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2019/08/19 12:00 a.m.•29 views

Adobe Photoshop JSX File ExtendScript Folder.execute Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

7.8CVSS1.8AI score0.14215EPSS
SaveExploits0References1
zdt
zdt
•added 2019/01/20 12:00 a.m.•58 views

Microsoft Windows CONTACT - Remote Code Execution Exploit

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CONTACT-FILE-INSUFFECIENT-UI-WARNING-WEBSITE-LINK-ARBITRARY-CODE-EXECUTION.txt + ISR: ApparitionSec...

6.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/01/17 12:00 a.m.•33 views

Microsoft Windows CONTACT - Remote Code Execution

Microsoft Windows CONTACT - Remote Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CONTACT-FILE-INSUFFECIENT-UI-WARNING-WEBSITE-LINK-ARBITRARY-CODE-EXECUTION.txt + ISR: ApparitionSec Vendo...

7.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/01/17 12:00 a.m.•109 views

Microsoft Windows CONTACT - Remote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CONTACT-FILE-INSUFFECIENT-UI-WARNING-WEBSITE-LINK-ARBITRARY-CODE-EXECUTION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft .CONTACT File...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/01/11 12:00 a.m.•68 views

Microsoft Windows VCF Remote Code Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-VCF-FILE-INSUFFICIENT-WARNING-REMOTE-CODE-EXECUTION.txt + ISR: ApparitionSec + Zero Day Initiative Program Vendor www.microsoft.com Product A VCF file is a...

0.1AI score
SaveExploits0
Rows per page
Query Builder