# CWE-451.

Every Advisory and CVE whose sources give the weakness CWE-451, newest first.

## Records, newest first (an older page)

- [BusyBox: In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing…](https://agentprime.io/advisories/CVE-2025-46394.md)
  `CVE-2025-46394` · CVE record: BusyBox BusyBox · CVSS 3.2 Low · Not analysed yet · Published 23 Apr 2025 · Tags: CWE-451
- [User Interface (UI) Misrepresentation of attachment URL](https://agentprime.io/advisories/CVE-2025-3523.md)
  `CVE-2025-3523` · CVE record: Mozilla Thunderbird · CVSS 6.4 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-451
- [Unexpected external content may be displayed in DNN ImageHandler](https://agentprime.io/advisories/CVE-2025-32371.md)
  `CVE-2025-32371` · CVE record: dnnsoftware Dnn.Platform · CVSS 4.3 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-451
- [Microsoft Edge for iOS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-29796.md)
  `CVE-2025-29796` · CVE record: Microsoft Microsoft Edge for iOS · CVSS 4.7 Medium · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed…](https://agentprime.io/advisories/CVE-2025-3074.md)
  `CVE-2025-3074` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed…](https://agentprime.io/advisories/CVE-2025-3073.md)
  `CVE-2025-3073` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52…](https://agentprime.io/advisories/CVE-2025-3072.md)
  `CVE-2025-3072` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-451
- [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2025-30467.md)
  `CVE-2025-30467` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: CWE-451
- [A clickjacking issue was addressed with improved out-of-process view handling.](https://agentprime.io/advisories/CVE-2024-54558.md)
  `CVE-2024-54558` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 2.8 Low · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Selection in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-1922.md)
  `CVE-2025-1922` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-451
- [Microsoft Outlook Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21259.md)
  `CVE-2025-21259` · CVE record: Microsoft Microsoft Outlook for Android · CVSS 5.3 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-451
- [Microsoft Edge for IOS and Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21253.md)
  `CVE-2025-21253` · CVE record: Microsoft Microsoft Edge for Android and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21404.md)
  `CVE-2025-21404` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-449, CWE-451
- [Google Chrome: Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53…](https://agentprime.io/advisories/CVE-2025-0451.md)
  `CVE-2025-0451` · CVE record: Google Chrome · CVSS 6.3 Medium · Not analysed yet · Published 4 Feb 2025 · Tags: CWE-451
- [TP-Link TL-SG108E clickjacking](https://agentprime.io/advisories/CVE-2025-0729.md)
  `CVE-2025-0729` · CVE record: TP-Link TL-SG108E · CVSS 6.9 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21262.md)
  `CVE-2025-21262` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83…](https://agentprime.io/advisories/CVE-2025-0446.md)
  `CVE-2025-0446` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Navigation in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-0435.md)
  `CVE-2025-0435` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-451
- [Windows SmartScreen Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21314.md)
  `CVE-2025-21314` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-451
- [IBM PowerHA SystemMirror for i clickjacking](https://agentprime.io/advisories/CVE-2024-55896.md)
  `CVE-2024-55896` · CVE record: IBM i · CVSS 5.4 Medium · Not analysed yet · Published 3 Jan 2025 · Tags: CWE-451
- [There is an improper interface design vulnerability in Huawei product.](https://agentprime.io/advisories/CVE-2020-9236.md)
  `CVE-2020-9236` · CVE record: Huawei FusionCompute · CVSS 8.8 High · Not analysed yet · Published 27 Dec 2024 · Tags: CWE-451
- [thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames](https://agentprime.io/advisories/GHSA-m3r7-8gw7-qwvc.md)
  `GHSA-m3r7-8gw7-qwvc`, `CVE-2024-55889`, `PKSA-nm7m-ddfs-x1rd` · Packagist `thorsten/phpmyfaq`: affected `<3.2.10`, fixed in `3.2.10` · CVSS 4.9 Medium · Not analysed yet · Published 13 Dec 2024 · Tags: CWE-451
- [PDF Document Spoofing in Documenso](https://agentprime.io/advisories/CVE-2024-52271.md)
  `CVE-2024-52271` · CVE record: Documenso Documenso and 1 more · CVSS 8.2 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-451
- [PDF Document Spoofing in DropBox Sign(HelloSign)](https://agentprime.io/advisories/CVE-2024-52270.md)
  `CVE-2024-52270` · CVE record: DropBox(HelloSign) DropBox Sign · CVSS 8.2 High · Not analysed yet · Published 5 Dec 2024 · Tags: CWE-451
- [AI Assistant PDF Document Spoofing in DocuSign](https://agentprime.io/advisories/CVE-2024-52269.md)
  `CVE-2024-52269` · CVE record: DocuSign DocuSign · CVSS 8.2 High · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-451
- [PDF Document Spoofing in DocuSeal](https://agentprime.io/advisories/CVE-2024-52277.md)
  `CVE-2024-52277` · CVE record: DocuSeal DocuSeal · CVSS 8.2 High · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-451
- [PDF Document Spoofing in DocuSign](https://agentprime.io/advisories/CVE-2024-52276.md)
  `CVE-2024-52276` · CVE record: DocuSign DocuSign · CVSS 8.2 High · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-451
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-49040.md)
  `CVE-2024-49040` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 13 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-451
- [Element's thumbnails can be abused to misrepresent the content of an attachment](https://agentprime.io/advisories/CVE-2024-51749.md)
  `CVE-2024-51749` · CVE record: element-hq element-web · CVSS 3.5 Low · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-451
- [Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages.](https://agentprime.io/advisories/CVE-2024-47044.md)
  `CVE-2024-47044` · CVE record: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Hikari Denwa router RT-400MI and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63…](https://agentprime.io/advisories/CVE-2023-7282.md)
  `CVE-2023-7282` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105…](https://agentprime.io/advisories/CVE-2023-7281.md)
  `CVE-2023-7281` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed…](https://agentprime.io/advisories/CVE-2024-7020.md)
  `CVE-2024-7020` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a…](https://agentprime.io/advisories/CVE-2024-7019.md)
  `CVE-2024-7019` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed…](https://agentprime.io/advisories/CVE-2024-8909.md)
  `CVE-2024-8909` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2024 · Tags: CWE-451
- [Windows MSHTML Platform Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43461.md)
  `CVE-2024-43461` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-451
- [Microsoft Teams for iOS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-38197.md)
  `CVE-2024-38197` · CVE record: Microsoft Microsoft Teams for iOS · CVSS 6.5 Medium · EPSS 0.17 · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a…](https://agentprime.io/advisories/CVE-2024-6999.md)
  `CVE-2024-6999` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-451
- [The date picker could partially obscure security prompts.](https://agentprime.io/advisories/CVE-2024-7529.md)
  `CVE-2024-7529` · CVE record: Mozilla Firefox and 2 more · CVSS 8.1 High · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-451
- [Uncontrolled Search Path Element in GitLab](https://agentprime.io/advisories/CVE-2024-6595.md)
  `CVE-2024-6595` · CVE record: GitLab GitLab · CVSS 3.0 Low · Not analysed yet · Published 17 Jul 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Picture in Picture in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2023-7011.md)
  `CVE-2023-7011` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2024 · Tags: CWE-451
- [Windows MSHTML Platform Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-38112.md)
  `CVE-2024-38112` · CVE record: Microsoft Windows 10 Version 22H2 and 4 more · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.84 · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-451
- [Form validation popups could block exiting full-screen mode](https://agentprime.io/advisories/CVE-2024-6610.md)
  `CVE-2024-6610` · CVE record: Mozilla Firefox and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-38082.md)
  `CVE-2024-38082` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.7 Medium · Not analysed yet · Published 20 Jun 2024 · Tags: CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-38093.md)
  `CVE-2024-38093` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2024 · Tags: CWE-451
- [Mozilla Firefox for iOS: In certain scenarios a malicious website could attempt to display a fake location URL bar…](https://agentprime.io/advisories/CVE-2024-38313.md)
  `CVE-2024-38313` · CVE record: Mozilla Firefox for iOS · CVSS 4.3 Medium · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-451
- [Mozilla Firefox: By manipulating the fullscreen feature while opening a data-list…](https://agentprime.io/advisories/CVE-2024-5698.md)
  `CVE-2024-5698` · CVE record: Mozilla Firefox · CVSS 5.4 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed…](https://agentprime.io/advisories/CVE-2024-4950.md)
  `CVE-2024-4950` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 15 May 2024 · Tags: CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-30055.md)
  `CVE-2024-30055` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-451
- [In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed.](https://agentprime.io/advisories/CVE-2024-23708.md)
  `CVE-2024-23708` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a…](https://agentprime.io/advisories/CVE-2024-2631.md)
  `CVE-2024-2631` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 20 Mar 2024 · Tags: CWE-451
- [IBM PowerSC clickjacking](https://agentprime.io/advisories/CVE-2023-50938.md)
  `CVE-2023-50938` · CVE record: IBM PowerSC · CVSS 6.5 Medium · Not analysed yet · Published 2 Feb 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed…](https://agentprime.io/advisories/CVE-2024-0805.md)
  `CVE-2024-0805` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-451
- [Mozilla Firefox: A bug in popup notifications delay calculation could have made it possible for an…](https://agentprime.io/advisories/CVE-2024-0750.md)
  `CVE-2024-0750` · CVE record: Mozilla Firefox and 2 more · CVSS 8.8 High · Not analysed yet · Published 23 Jan 2024 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90…](https://agentprime.io/advisories/CVE-2023-2941.md)
  `CVE-2023-2941` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 May 2023 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Picture In Picture in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2023-2938.md)
  `CVE-2023-2938` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 May 2023 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Picture In Picture in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2023-2937.md)
  `CVE-2023-2937` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 May 2023 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed…](https://agentprime.io/advisories/CVE-2023-0700.md)
  `CVE-2023-0700` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2023 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2023-0130.md)
  `CVE-2023-0130` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: CWE-451
- [Mozilla Firefox ESR: Through a series of popup and \<code>window.print()\</code> calls…](https://agentprime.io/advisories/CVE-2022-45404.md)
  `CVE-2022-45404` · CVE record: Mozilla Firefox ESR and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-451

Newest: <https://agentprime.io/advisories/tag/cwe-451.md>
Older: <https://agentprime.io/advisories/tag/cwe-451.md?cursor=WyIyMDIyLTEyLTIyVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMi00NTQwNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-451&cursor=WyIyMDI1LTA0LTI5VDEzOjEzOjQwLjg5OTAwMFoiLCJDVkUtMjAyNS00MDg2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-451/?cursor=WyIyMDI1LTA0LTI5VDEzOjEzOjQwLjg5OTAwMFoiLCJDVkUtMjAyNS00MDg2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.