Advisories · Weakness
CWE-356.
Every Advisory and CVE whose sources give the weakness CWE-356, newest first.
- CVSS 7.8 High
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.
- Google Android
- CWE-356
- CVSS 7.8 High
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
- Xmind
- CWE-356
- CVSS 6.4 Medium
Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
- zed
- CWE-356
- CVSS 8.0 High
Epiphany: insecure external protocol invocation in epiphany
- CWE-356
- CVSS 7.8 High
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
- Soda PDF Desktop
- CWE-356
- CVSS 7.0 High
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability
- Soda PDF Desktop
- CWE-356
- CVSS 7.8 High
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability
- Soda PDF Desktop
- CWE-356
- CVSS 7.0 High
pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
- pdfforge PDF Architect
- CWE-356
- CVSS 7.8 High
pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability
- pdfforge PDF Architect
- CWE-356
- CVSS 7.0 High
pdfforge PDF Architect DOC File Insufficient UI Warning Remote Code Execution Vulnerability
- pdfforge PDF Architect
- CWE-356
- CVSS 7.0 High
PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution Vulnerability
- PDFsam Enhanced
- CWE-356
- CVSS 7.8 High
PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability
- PDFsam Enhanced
- CWE-356
- CVSS 7.0 High
PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability
- PDFsam Enhanced
- CWE-356
- CVSS 5.5 Medium
JetBrains Junie: In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61…
- JetBrains Junie
- CWE-356
- CVSS 6.5 Medium
Insufficient verification of data authenticity in Google Android
- Google Android
- CWE-345
- CWE-356
- CVSS 8.1 High
JavaScript Execution via Spoofed PDF Attachment and file:/// Link
- Mozilla Thunderbird
- CWE-356
- CVSS 6.8 Medium
RARLAB WinRAR: Issue that bypasses the "Mark of the Web" security warning function for files when…
- RARLAB WinRAR
- CWE-356
- CVSS 7.8 High
NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability
- NI Vision Builder AI
- CWE-356
- CVSS 2.1 Low
Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.
- OpenText™ Filr
- CWE-356
- CVSS 5.4 Medium
Microsoft Edge for iOS Spoofing Vulnerability
- Microsoft Edge for iOS
- CWE-356
- CVSS 6.5 Medium
Graphic on-click binding allows unchecked script execution
- The Document Foundation LibreOffice
- Code injection
- CWE-356
- CVSS 6.1 Medium
The permission prompt input delay could expire while the window is not in focus.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-356
- CVSS 7.8 High
AVEVA Edge: This vulnerability allows remote attackers to execute arbitrary code on affected…
- AVEVA Edge
- CWE-356
- CVSS 8.8 High
Metabase vulnerable to arbitrary SQL execution from queryhash
- metabase
- CWE-356
- CVSS 7.8 High
Inductive Automation Ignition: This vulnerability allows remote attackers to execute arbitrary code on affected…
- Inductive Automation Ignition
- CWE-356
- CVSS 7.5 High
Xiaomi Browser: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Xiaomi Browser
- CWE-356
- CVSS 4.3 Medium
Tencent WeChat: This vulnerability allows remote attackers redirect users to an external resource on…
- Tencent WeChat
- CWE-356
- CVSS 8.8 High
Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Bitdefender SafePay
- CWE-356
- CVSS 8.8 High
Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Bitdefender SafePay
- CWE-356
- CVSS 8.8 High
Bitdefender SafePay: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Bitdefender SafePay
- CWE-356
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
[UNKNOWN] libreoffice: It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a…
- [UNKNOWN] libreoffice
- CWE-356
-
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor)…
- Becton, Dickinson and Company Kiestra and InoqulA systems
- CWE-356
-
A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA,…
- Becton, Dickinson and Company Kiestra and InoqulA systems
- CWE-356