UBUNTU-CVE-2023-20953

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup completion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

Fortra Cobalt Strike 跨站脚本漏洞

Fortra Cobalt Strike is an application from Fortra, Inc. provides you with a post-development agent and covert channel to mimic a quiet, long-term embedded participant in a customer's network. A security vulnerability in Fortra Cobalt Strike version 4.7.1, which stems from the inability to proper...

CVE-2022-22512

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network...

PT-2023-21890 · Jenkins · Jenkins Jacoco Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins JaCoCo Plugin versions 3.3.2 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability. It occurs because class and method names shown on the UI are not escaped, allowing attackers who can control input fil...

The vulnerability of the Azure Service Fabric distributed system, related to errors in information representation by the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of the Azure Service Fabric distributed system is related to errors in information representation by the user interface. Exploiting this vulnerability may allow a malicious actor to perform a spoofing attack remotely...

VARTA Storage 信任管理问题漏洞

VARTA Storage is VARTA's AC all-in-one system with an integrated battery inverter, ideal for retrofits or new installations. VARTA Storage suffers from a trust management issue vulnerability that stems from hard-coded credentials that allow an unauthorized attacker to gain administrative access t...

PT-2023-20584 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server version 9.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

The vulnerability of the Microsoft Office application suite for Android, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Office application suite for Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...

The vulnerability of Microsoft Excel editors, related to errors in information representation by the user interface, allows attackers to perform spoofing attacks.

The vulnerability of Microsoft Excel editors is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of Microsoft SharePoint Server’s software packages, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft SharePoint Server packages is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow a malicious actor to carry out spoofing attacks remotely...

CVE-2022-43874

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

[SECURITY] Fedora 38 Update: k3b-22.12.3-2.fc38

K3b provides a comfortable user interface to perform most CD/DVD burning tasks. While the experienced user can take influence in all steps of the burning process the beginner may find comfort in the automatic settings and the reasonable k3b defaults which allow a quick start...

KLA48561 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in Microsoft Dynamics 365 on-premises can be exploited...

PT-2023-1767 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It allows a remote attacker to conduct spoofing attacks, affecting the system...

PT-2023-1720 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Webview2 control in Microsoft Edge. Exploitation of this issue may all...

PT-2023-1780 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Excel, allowing an attacker to conduct spoofing attacks. This can affect the...

PT-2023-1867 · Microsoft · Azure Service Fabric

Name of the Vulnerable Software and Affected Versions: Azure Service Fabric affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Azure Service Fabric platform. Exploitation of this issue may allow a remote...

KLA48557 SUI vulnerability in Microsoft Browser

A spoofing vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2023-24892 Related products Microsoft-Edge CVE list CVE-2023-24892 critical KB list Solution Install necessary updates from the Settings and mor...

KLA48571 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in...

PT-2023-1763

Name of the Vulnerable Software and Affected Versions Office for Android affected versions not specified Description The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow an attacker to conduct spoofing attacks...