Lucene search
+L

971 matches found

CNNVD
CNNVD
added 2021/12/14 12:00 a.m.9 views

Siemens SINUMERIK 信任管理问题漏洞

Siemens SINUMERIK Edge is a combination of hardware and software that provides a machine-oriented system platform for applications that facilitate digital production support and optimization.SINUMERIK Edge Certificate Improper Validation VulnerabilityAffected software does not properly validate...

7.4CVSS5.7AI score0.00479EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.10 views

PT-2021-6346

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description A spoofing issue exists in Visual Studio Code due to improper handling of user data. Remote attackers may be able to perform a spoofing attack. Recommendations At the moment, there...

4.3CVSS6.2AI score0.02691EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.10 views

PT-2021-5671

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in the representation of information by the user interface, allowing an attacker to conduct a spoofing attack. This can affect the system, potentially...

5.5CVSS6.8AI score0.0198EPSS
SaveExploits0References7
NCSC
NCSC
added 2021/12/14 12:00 a.m.44 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Remote code execution User rights Spoofing Access to sensitive data Increased user privileges The tables...

9.6CVSS7.2AI score0.05098EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/12/14 12:00 a.m.4 views

PT-2021-6349 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to perform a spoofing attack. Recommendations: At th...

7.6CVSS6AI score0.01227EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2021/12/10 2:15 p.m.8 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.8AI score0.00727EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/12/10 2:15 p.m.25 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS0.00727EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/10 2:15 p.m.9 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.9AI score0.00727EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/10 2:15 p.m.25 views

Input validation

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS4.6AI score0.00727EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/12/10 1:38 p.m.59 views

CVE-2021-40834

CVE-2021-40834 is an UI overlay vulnerability in F‑Secure SAFE Browser for Android. A specially crafted URL can cause the browser to go full screen and hide the user interface, enabling a spoofing attack by a remote attacker. Documented impact is spoofing; CVSS v3.1 vector indicates Network attac...

4.3CVSS4.5AI score0.00727EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2021/12/10 7:39 a.m.28 views

Spoofing Attack

thunderbird and firefox are vulnerable to spoofing attack. The vulnerability exists due to a lack of sanitization of the cursor x and y axis input when using a zoomed native cursor...

4.3CVSS3.8AI score0.014EPSS
SaveExploits0References13Affected Software7
CNNVD
CNNVD
added 2021/12/10 12:00 a.m.10 views

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from the Finnish company F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-secure SAFE Browser for Android, which stems from the SAFE Browser going full-screen and...

4.3CVSS5.3AI score0.00727EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/12/10 12:00 a.m.19 views

Mozilla Firefox Spoofing Attack Vulnerability

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a spoofing attack, which stems from incorrect handling of user-supplied data when scaling the native cursor, and can be exploited by remote attackers to perform cursor spoofing attacks...

4.3CVSS4.2AI score0.014EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/12/09 2:46 p.m.14 views

Mozilla: Missing fullscreen and pointer lock notification when requesting both

The Mozilla Foundation Security Advisory describes this flaw as: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks...

4.3CVSS7.3AI score0.01158EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:58 p.m.15 views

Mozilla: Missing fullscreen and pointer lock notification when requesting both

The Mozilla Foundation Security Advisory describes this flaw as: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks...

4.3CVSS7.3AI score0.01158EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 12:43 p.m.18 views

Mozilla: Missing fullscreen and pointer lock notification when requesting both

The Mozilla Foundation Security Advisory describes this flaw as: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks...

4.3CVSS7.3AI score0.01158EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/12/08 9:20 p.m.28 views

CVE-2021-43538

By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 9...

6.6AI score0.01158EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2021/12/08 10:16 a.m.8 views

Mozilla: Missing fullscreen and pointer lock notification when requesting both

The Mozilla Foundation Security Advisory describes this flaw as: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks...

4.3CVSS7.3AI score0.01158EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/11/11 12:00 a.m.18 views

Mozilla Firefox Security Advisory (MFSA2014-19) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS9.6AI score0.0195EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:00 a.m.32 views

EulerOS 2.0 SP9 : systemd (EulerOS-SA-2021-2700)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the...

6.1CVSS6.7AI score0.08792EPSS
SaveExploits3References3
Rows per page
Query Builder