Lucene search
K

8014 matches found

CNNVD
CNNVD
added 2025/07/11 12:0 a.m.4 views

Juniper Networks Junos OS 访问控制错误漏洞

Juniper Networks Junos OS is a Juniper Networks, Inc. network operating system dedicated to the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS suffers from an Access Control Error vulnerability that stems from improper acces...

6.8CVSS6.7AI score0.00135EPSS
Exploits0References2
CNVD
CNVD
added 2025/07/11 12:0 a.m.4 views

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-16592)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

6.2CVSS6.9AI score0.00093EPSS
Exploits0References1
Fedora
Fedora
added 2025/07/10 3:22 p.m.5 views

[SECURITY] Fedora 42 Update: rust-gitui-0.26.3-11.fc42

Blazing fast terminal-ui for git...

7.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/09 6:16 p.m.10 views

CVE-2025-20320

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the User Interface - View...

7.3CVSS6.5AI score0.00367EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/09 10:22 a.m.6 views

CVE-2025-3626

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command 'OS Command Injection' while uploading a config file via webUI...

9.1CVSS6.8AI score0.00887EPSS
Exploits0References1
OSV
OSV
added 2025/07/08 5:15 p.m.0 views

CVE-2025-33054

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS5.8AI score0.00828EPSS
Exploits0References1
OSV
OSV
added 2025/07/08 3:15 p.m.1 views

CVE-2025-2793

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

5.4CVSS5.5AI score0.00167EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/07 5:47 p.m.7 views

CVE-2025-20320 Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the User Interface - View...

6.3CVSS0.00367EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.0 views

webkitgtk: malicious content may lead to UI spoofing

A vulnerability was found in webkit. This issue occurs when visiting a website that frames malicious content, which may lead to UI spoofing...

6.5CVSS5.7AI score0.06293EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.2 views

webkitgtk: UI spoofing while Visiting a website that frames malicious content

A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing...

6.1CVSS5.7AI score0.00705EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.1 views

webkitgtk: Visiting a malicious website may lead to address bar spoofing

A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website...

6.5CVSS5.8AI score0.00934EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.3 views

webkit: visiting a malicious website may lead to address bar spoofing

A flaw was found in WebKit that may allow a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. By tricking a victim into visiting a specially crafted website, the attacker could perform address bar spoofing...

7.5CVSS5.8AI score0.0086EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/07/07 2:28 a.m.2 views

webkitgtk: issue was addressed with improved UI handling

A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing...

6.1CVSS5.7AI score0.01192EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.3 views

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...

3.9CVSS6.7AI score0.00083EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.1 views

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

6.6CVSS6.6AI score0.00087EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.4 views

PT-2025-28231 · Splunk · Splunk Cloud Platform +1

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.3 Splunk Enterprise versions prior to 9.3.5 Splunk Enterprise versions prior to 9.2.7 Splunk Enterprise versions prior to 9.1.10 Splunk Cloud Platform versions prior to 9.3.2411.107 Splunk Cloud Platfor...

7.3CVSS6.6AI score0.00367EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/07/04 12:0 a.m.8 views

Fedora 41 : guacamole-server (2025-c597fcda32)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c597fcda32 advisory. Apache Guacamole 1.6.0 User interface / platform Add the ability to specify separate permissions for History and Active sessions tabs GUACAMOLE-538...

7.5CVSS7.7AI score0.00424EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/03 12:0 a.m.9 views

Fedora 42 : guacamole-server (2025-774aa2765e)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-774aa2765e advisory. Apache Guacamole 1.6.0 User interface / platform Add the ability to specify separate permissions for History and Active sessions tabs GUACAMOLE-538...

7.5CVSS7.7AI score0.00424EPSS
Exploits0References2
OSV
OSV
added 2025/07/02 4:15 p.m.2 views

CVE-2025-20310

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

6.1CVSS6AI score0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/02 4:5 p.m.3 views

CVE-2025-20310 Cisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web UI does not properly validate user-supplied input. An...

6.1CVSS6AI score0.00238EPSS
Exploits0References1
Rows per page
Query Builder