CVE-2022-22654

A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing...

Microsoft SharePoint Server Spear Phishing

The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Microsoft Dynamics 365 Spear Phishing

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in information presentation at the user interface level. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

Microsoft SharePoint Server Spear Phishing

The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Microsoft Edge Android Spoofing

The vulnerability of Microsoft Edge browser for Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

GHSA-CR8C-972V-RMP3 pgAdmin 4 Path Traversal vulnerability

When run in server mode, pgAdmin 4 allows users to store files on the server under individual storage directories. Files such as SQL scripts may be uploaded through the user interface. The URI to which upload requests are made fails to validate the upload path to prevent path traversal techniques...

Windows Authenticode Spoofing

The vulnerability of the Authenticode signature technology implemented in Microsoft Windows operating systems is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a resource management error vulnerability that stems from post-release reuse in the browser UI...

CVE-2021-39055

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2022-15609 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: The issue allows an app to potentially spoof system notifications and UI. This was addressed with a new entitlement. Recommendations: For versions prior to 12.3, update to macOS Monterey 12.3 to resol...

IBM Spectrum Copy Data Management Cross-Site Script Vulnerability

IBM Spectrum Copy Data Management is an implementation of International Business Machines Corporation IBM to modernize, simplify, and automate data center copy management processes.A cross-site scripting vulnerability exists in IBM Spectrum Copy Data Management versions 2.2.0.0 inclusive through...

Apple macOS Monterey security vulnerabilities

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions prior to 12.3, which stems from an error in the System Preferences feature. Native applications can spoof system notificatio...

CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

CVE-2021-27414 User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

PowerShell Spoofing

The vulnerability of PowerShell command interpreters is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

CVE-2021-39055

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2022-25817

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent...

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

HUAWEI EMUI security vulnerabilities

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to unauthorized access, which could be exploited by attackers to compromise confidentiality...