Lucene search
K

56 matches found

Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.4 views

PT-2021-5087 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing for spoofing attacks. It enables a remote attacker to affect the system...

7.1CVSS6.1AI score0.08109EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.2 views

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in the user interface’s information presentation, allows a perpetrator to carry out spear-phishing attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using specially crafted requests...

5.5CVSS6.4AI score0.00899EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/10/12 12:0 a.m.2 views

PT-2021-4396 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's information display. It may allow a remote attacker to gain unauthorized access to protected information. The...

7.5CVSS6AI score0.02209EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2021/10/12 12:0 a.m.2 views

PT-2021-4376 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks, affecting the system...

7.6CVSS7AI score0.01304EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.5 views

The vulnerability of the manager for Cockpit servers, related to errors in displaying the user interface or frames, allows a perpetrator to inject malicious code.

The vulnerability of the Cockpit server administrator relates to errors in displaying the user interface or frames. Exploiting this vulnerability allows a malicious actor to inject malicious code remotely...

5CVSS5.8AI score0.01218EPSS
Exploits0References5Affected Software3
Positive Technologies
Positive Technologies
added 2021/07/20 12:0 a.m.3 views

PT-2021-3773 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...

7.5CVSS5.4AI score0.01218EPSS
Exploits0References43
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.2 views

PT-2021-6025 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to errors in...

5.3CVSS5.9AI score0.01767EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.5 views

The vulnerability of the SharePoint Enterprise Server software, related to errors in information presentation on the user interface, allows a hacker to execute an attack using a spearphishing technique.

The vulnerability of the SharePoint Enterprise Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability could allow a malicious actor to carry out an attack using a spear-phishing technique...

7.8CVSS7.1AI score0.01569EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.2 views

The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

6.2CVSS6.3AI score0.0071EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.3 views

The vulnerability of Microsoft Exchange Server is related to the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

6.4CVSS6.8AI score0.01817EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/02/09 12:0 a.m.4 views

PT-2021-2070 · Microsoft · Skype For Business Server

Name of the Vulnerable Software and Affected Versions: Skype for Business Server Microsoft Lync Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks...

7.1CVSS6.2AI score0.0162EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.3 views

The vulnerability of the preview function of Google Chrome tabs, which allows attackers to perform spear-phishing attacks

The vulnerability of the preview function in Google Chrome browsers is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to perform spoofing attacks remotely...

6.4CVSS6.7AI score0.00687EPSS
Exploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.6 views

The vulnerability of the Address Bar Handler component in the Yandex Browser for Android allows attackers to perform spoofing attacks.

The vulnerability of the Address Bar Handler component in the Yandex Browser for Android is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

4.3CVSS5.5AI score0.00982EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.3 views

The vulnerability of the Windows operating system, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows operating system is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.5CVSS5.9AI score0.19124EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:0 a.m.2 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in information representation errors in the user interface, which allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

5.5CVSS6.6AI score0.01654EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/11/13 12:0 a.m.4 views

The vulnerability of the Omnibox component in the Chrome web browser allows a hacker to replace the URI address.

The vulnerability of the Omnibox component in the Chrome web browser is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the displayed URI address...

7.5CVSS7.7AI score0.01402EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder