Mozilla Thunderbird < 128.1

The version of Thunderbird installed on the remote Windows host is prior to 128.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-37 advisory. - Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. CVE-2024-7528 -...

Mozilla Firefox ESR < 128.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-35 advisory. - Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. CVE-2024-7528 ...

The vulnerability of Siemens SCALANCE industrial switches, related to bypassing authentication through spoofing, allows a intruder to trigger a maintenance failure.

The vulnerability of Siemens SCALANCE industrial switches relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability can allow a malicious actor to trigger a service failure remotely...

The vulnerability of the Single Sign-On module for application-based SAML protocols in the Apache CloudStack software, which is used for creating, managing, and deploying infrastructure cloud services, allows a perpetrator to bypass authentication processes and gain full access to any user’s account.

The vulnerability of the Single Sign-On module for application-based SAML programs involved in creating, managing, and deploying infrastructure cloud services like Apache CloudStack relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a...

The vulnerability of Firefox browser for iOS, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Firefox browser for iOS is related to information representation errors in the user interface. Exploiting this vulnerability allows an attacker to perform a spoofing attack by replacing the URL address in the location string cp...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

PT-2024-4476 · Mozilla +1 · Firefox For Ios +1

Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 127 Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using the cpLocation attribute, potential...

The vulnerability of the Register method in the Telerik Report Server reporting framework allows a malicious actor to access limited functions.

The vulnerability of the Register method in the Telerik Report Server reporting framework relates to bypassing authentication processes through spoofing. Exploiting this vulnerability can allow unauthorized users to gain access to limited features of the system...

VulnCheck KEV: CVE-2024-4358

Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access...

WordPress Site Reviews plugin < 7.0.0 - IP Spoofing vulnerability

IP Spoofing vulnerability discovered by Sławomir Zakrzewski, Maksymilian Kubiak AFINE in WordPress Plugin Site Reviews versions 7.0.0...

Mozilla Firefox for Android Spoofing Vulnerability (CNVD-2024-23342)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...

PT-2024-3718 · Microsoft +1 · Bing Search +1

Name of the Vulnerable Software and Affected Versions: Microsoft Bing Search affected versions not specified Description: The issue is related to a data protection mechanism flaw in the Microsoft Bing Search system for the iOS operating system. This can be exploited by a remote attacker to conduc...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...

RHEL 7 : systemd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary file...

AZL-40403 CVE-2024-34397 affecting package glib for versions less than 2.71.0-7

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

Microsoft Windows Proxy Driver 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Proxy Driver. An attacker has exploited the vulnerability to perform spoofing attacks. The following products and editions are...

The vulnerability of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc.) implemented in the command-line utility cURL, which allows attackers to perform spoofing attacks.

The vulnerability of TLS protocols HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. implemented by the command-line utility cURL is related to improper authentication of certificates. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:0113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla: Fullscreen Notification could have been hidden by select element

The Mozilla Foundation Security Advisory describes this flaw as: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks...

PT-2024-1826 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack. Recommendations: ...