PT-2023-1720 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Webview2 control in Microsoft Edge. Exploitation of this issue may all...

KLA48561 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Microsoft Dynamics 365 on-premises can be exploited...

PT-2023-1867 · Microsoft · Azure Service Fabric

Name of the Vulnerable Software and Affected Versions: Azure Service Fabric affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Azure Service Fabric platform. Exploitation of this issue may allow a remote...

KLA48557 SUI vulnerability in Microsoft Browser

A spoofing vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-24892 Related products Microsoft-Edge CVE list CVE-2023-24892 critical KB list Solution Install necessary updates from the Settings and mor...

PT-2023-1780 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Excel, allowing an attacker to conduct spoofing attacks. This can affect the...

KLA48571 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in...

PT-2023-1763

Name of the Vulnerable Software and Affected Versions Office for Android affected versions not specified Description The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow an attacker to conduct spoofing attacks...

KLA48552 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in...

KLA48544 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...

bumsys 安全漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in unilogies bumsys versions prior to v2.0.2, which stems from an improper restriction in the UI layer or framework in which the software is rendered...

PT-2023-16929 · Unilogies · Bumsys

Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.0.2 Description: The issue is related to improper restriction of rendered UI layers or frames. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...

The vulnerability of the Microsoft OneNote note-taking software, related to errors in information presentation on the user interface, allows a perpetrator to exploit their privileges.

The vulnerability of the Microsoft OneNote note-taking software relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

SUSE CVE-2023-1235

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. Chromium security severity: Low...

MeterSphere 路径遍历漏洞

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere 2.7.1 before the version of the path traversal vulnerability , the vulnerability stems from the user in the UI operation to create a resource file in the process of the path will be appended to th...

UBUNTU-CVE-2023-1235

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. Chromium security severity: Low...

The vulnerability of the PowerScale OneFS operating system, related to deficiencies in user interface security, allows attackers to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to security flaws in the user interface. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose sensitive information that is protected by the system...

CVE-2023-26213

On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/updatecertificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain...

Cross site scripting

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Mozilla Thunderbird Security Advisories (MFSA2023-05, MFSA2023-07) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

CVE-2023-20104 Cisco Webex App for Web Cross-Site Scripting Vulnerability

A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...