20945 matches found
Malicious code in request-draft-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20e7c9b27e44bc6a2f406fc1638d5949e6a8ff79801714031432723b004872d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-0813
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process...
CVE-2025-0813
CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process...
CVE-2025-0813
The CVE-2025-0813 entry concerns the Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI). The connected sources describe an authentication bypass vulnerability caused by improper authentication, which can be exploited when an unauthorized user with physical access to t...
CVE-2025-27434 Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)
Due to insufficient input validation, SAP Commerce Swagger UI allows an unauthenticated attacker to inject the malicious code from remote sources, which can be leveraged by an attacker to execute a cross-site scripting XSS attack. This could lead to a high impact on the confidentiality, integrity...
ABB RMC-100
SUMMARY An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop. 2. WORKAROUNDS The vulnerability is only present when the REST interface is enabled...
The vulnerability of the TCC component in operating systems for macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the TCC component in macOS, iOS, and iPadOS is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information...
CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file
umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...
Google Chrome Browser UI Incorrectly Implemented Vulnerability
Google Chrome is a WEB browser developed by Google Inc. An incorrect implementation vulnerability exists in the Google Chrome Browser UI. An attacker can exploit this vulnerability to submit a special web request to perform UI spoofing...
KLA81252 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Type Confusion vulnerability in V8 can be exploited to cause denial of...
CVE-2025-26167
Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...
CVE-2025-1922
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2025-1917
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
Microsoft Edge (Chromium) < 134.0.3124.51 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.51. It is, therefore, affected by multiple vulnerabilities as referenced in the March 7, 2025 advisory. - No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to perform...
Gradio UI Detection
The remote web server hosts Gradio UI web application %NASLMINLEVEL 80900 Tenable, Inc. include'compat.inc'; if description scriptid232290; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/03/18"; scriptnameenglish:"Gradio UI Detection";...
CVE-2025-26167
Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files...
SUSE CVE-2025-1922
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2024-8906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to...
Linux Distros Unpatched Vulnerability : CVE-2024-7981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium...