9920 matches found
ROS-20240917-01
A vulnerability in the user tabs of Google Chrome and Microsoft Edge browsers is related to an incorrect security checks for standard elements. Exploitation of the vulnerability could allow an attacker, acting remotely, to spoof the user interface with a specially crafted HTML page. generated HTM...
Apple macOS security vulnerabilities
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7, which originates from a visit to a malicious Web site that may result in user interface spoofing...
CVE-2024-40797
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Visiting a malicious website may lead to user interface spoofing...
CVE-2024-40797
This CVE-2024-40797 affects macOS where visiting a malicious website may cause user interface spoofing. It is addressed by improved state management and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The NVD/NDA references describe a network-accessible issue with UI spoo...
CVE-2024-40797
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Visiting a malicious website may lead to user interface spoofing...
PT-2024-29120
Name of the Vulnerable Software and Affected Versions Safari versions prior to 18 macOS versions prior to Sequoia 15 Description The issue was addressed with improved UI. Visiting a malicious website may lead to address bar spoofing. Recommendations For Safari versions prior to 18, update to Safa...
MSHTML Spoofing Attack
The vulnerability of the MSHTML platform in Microsoft Windows systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft Windows MSHTML Platform contains a user interface UI misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112...
Firefox Service Workers Confidential Data Access
The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
Firefox Improper Layer Limitation Confidential Data Compromise
The vulnerability in the Firefox web browser is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 2, 2024 to September 8, 2024)
Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with =1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024 , r esearchers...
CVE-2024-45856
A cross-site scripting XSS vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScript code within the web UI...
PT-2024-31813
Name of the Vulnerable Software and Affected Versions: MindsDB affected versions not specified Description: A cross-site scripting XSS issue exists, enabling the execution of a JavaScript payload whenever a user enumerates an ML Engine, database, project, or dataset containing arbitrary JavaScrip...
Huawei HarmonyOS and EMUI Input Validation Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI suffer from an input validation...
KLA73227 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of...
KLA73222 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a...
VulnCheck KEV: CVE-2024-43461
Microsoft Windows MSHTML Platform contains a user interface UI misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112...
KLA73226 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premise...
VulnCheck KEV: CVE-2021-30461
A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...
Views Component UI Replacement
The vulnerability of the Views component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially crafted HTML page...