522 matches found
CVE-2025-47963
No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-47963
No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49706
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-33054
Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49760
External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...
CVE-2025-49706
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-48802
Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...
CVE-2025-33054
Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-33054
Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49706
CVE-2025-49706 is an improper authentication vulnerability in Microsoft SharePoint that is exploited as part of the ToolShell chain to gain unauthenticated access and enable further exploitation (e.g., CVE-2025-53770 RCE). Public sources describe exploitation via ToolPane.aspx to bypass auth, lea...
CVE-2025-48802
CVE-2025-48802 is a Windows SMB Server spoofing vulnerability caused by improper certificate validation, enabling an authorized attacker to spoof over a network. The CVSS 3.1 base vector shows Network access, Low attack complexity, Privileges required: Low, no user interaction, with Impact: confi...
PT-2025-28506
Name of the Vulnerable Software and Affected Versions: Remote Desktop Client affected versions not specified Description: The issue is related to insufficient UI warnings for dangerous operations in Remote Desktop Client, allowing an unauthorized attacker to perform spoofing over a network. This...
Security Updates for Microsoft Visual Studio 2022/2019 Products (May 2025)
The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by network spoofing vulnerability where External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...
CVE-2025-47977
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
CVE-2024-27823
A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.3, watchOS 10.5. An attacker in a privileged network position may be able to...
Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : .NET vulnerability (USN-7509-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7509-1 advisory. It was discovered that .NET did not properly handle file names and paths under certain conditions. An attacker could possibly use this...
USN-7509-1 dotnet8, dotnet9 vulnerability
It was discovered that .NET did not properly handle file names and paths under certain conditions. An attacker could possibly use this issue to perform spoofing over a network...
CVE-2025-26646
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...