Lucene search
+L

222 matches found

RedhatCVE
RedhatCVE
added 2025/11/19 6:19 p.m.17 views

CVE-2025-13082

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8. Mitigation Mitigation for this issue i...

4.3CVSS6.2AI score0.00227EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/11/18 6:32 p.m.11 views

Drupal core allows Content Spoofing

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

4.3CVSS6.9AI score0.00227EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/11/18 6:32 p.m.8 views

GHSA-H89P-5896-F4Q8 Drupal core allows Content Spoofing

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

5.9CVSS6.8AI score0.00227EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/11/18 5:43 p.m.3 views

User Interface (UI) Misrepresentation of Critical Information

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information. An attacker who convinces a user to follow a malicious link can...

4.3CVSS6.6AI score0.00227EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/18 4:55 p.m.35 views

CVE-2025-13082

CVE-2025-13082 concerns Drupal core, where a UI misrepresentation of critical information allows content spoofing. Affected versions are Drupal core: 8.0.0–before 10.4.9, 10.5.0–before 10.5.6, 11.0.0–before 11.1.9, and 11.2.0–before 11.2.8. The vulnerability stems from the user interface displayi...

4.3CVSS6.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/11/18 4:55 p.m.9 views

CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

4.3CVSS5.9AI score0.00227EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/11/18 4:55 p.m.16 views

CVE-2025-13082 Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

User Interface UI Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8...

0.00227EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/11/07 2:52 p.m.203 views

Exploit for User Interface (UI) Misrepresentation of Critical Information in Microsoft

CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for...

7.8CVSS7.2AI score0.68864EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-10001

Malware in sbrugna...

8.8CVSS8.6AI score0.01045EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2017-8994

Malware in sbrugna...

7.5CVSS7.6AI score0.01196EPSS
SaveExploits0References9
Snyk
Snyk
added 2025/09/23 6:30 p.m.15 views

User Interface (UI) Misrepresentation of Critical Information

Overview Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information via improper handling of error messages passed through URL parameters. An attacker can manipulate browser-displayed error messages by injecting arbitrary content, potentially...

5.3CVSS7.1AI score0.00215EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/03 8:15 p.m.11 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

5.3CVSS0.00327EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/03 12:00 a.m.21 views

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

0.00327EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/26 5:15 p.m.37 views

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.68864EPSS
SaveExploits3References3
OSV
OSV
added 2025/08/26 5:15 p.m.17 views

CVE-2025-9491

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS6.2AI score0.68864EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.14 views

PT-2025-32770 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: A user interface UI misrepresentation of critical information in Microsoft Edge for Android can allow an unauthorized attacker to perform spoofing over a network...

4.3CVSS6.7AI score0.00464EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/07/30 12:00 a.m.4 views

RockyLinux 9 : thunderbird (RLSA-2025:7435)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7435 advisory. thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing...

6.4CVSS6.9AI score0.00337EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/05/27 12:00 a.m.9 views

RHEL 9 : thunderbird (RHSA-2025:7435)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7435 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...

6.4CVSS7AI score0.00337EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
added 2025/05/13 12:00 a.m.23 views

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.7AI score0.00337EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:00 a.m.10 views

RHEL 9 : thunderbird (RHSA-2025:4513)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:4513 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachmen...

6.4CVSS7AI score0.00337EPSS
SaveExploits0References8
Rows per page
Query Builder