# CWE-451. Every Advisory and CVE whose sources give the weakness CWE-451, newest first. ## Records, newest first (an older page) - [Mozilla Firefox: A malicious website that could create a popup could have resized the popup to overlay the…](https://agentprime.io/advisories/CVE-2022-34479.md) `CVE-2022-34479` · CVE record: Mozilla Firefox and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-451 - [Mozilla Firefox: When resizing a popup after requesting fullscreen access…](https://agentprime.io/advisories/CVE-2022-26383.md) `CVE-2022-26383` · CVE record: Mozilla Firefox and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-451 - [Mozilla Firefox: Under certain circumstances, a JavaScript alert (or prompt) could have been shown while…](https://agentprime.io/advisories/CVE-2022-22762.md) `CVE-2022-22762` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-451 - [In strings.xml, there is a possible permission bypass due to a misleading string.](https://agentprime.io/advisories/CVE-2022-20530.md) `CVE-2022-20530` · CVE record: Android · CVSS 5.3 Medium · Not analysed yet · Published 16 Dec 2022 · Tags: CWE-451 - [A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below.](https://agentprime.io/advisories/CVE-2022-38163.md) `CVE-2022-38163` · CVE record · CVSS 3.5 Low · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-451 - [Google Chrome: Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a…](https://agentprime.io/advisories/CVE-2022-3313.md) `CVE-2022-3313` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-451 - [mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI](https://agentprime.io/advisories/CVE-2022-39258.md) `CVE-2022-39258` · CVE record: mailcow mailcow-dockerized · CVSS 8.1 High · Not analysed yet · Published 27 Sept 2022 · Tags: Information disclosure, CWE-451 - [The issue was addressed with improved UI handling.](https://agentprime.io/advisories/CVE-2022-32816.md) `CVE-2022-32816` · CVE record: Apple macOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-451 - [SourceCodester Gym Management System clickjacking](https://agentprime.io/advisories/CVE-2022-2800.md) `CVE-2022-2800` · CVE record: SourceCodester Gym Management System · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2022 · Tags: CWE-451 - [HCL Sametime is vulnerable to clickjacking](https://agentprime.io/advisories/CVE-2021-27773.md) `CVE-2021-27773` · CVE record: HCL Software Sametime · CVSS 4.2 Medium · Not analysed yet · Published 12 May 2022 · Tags: CWE-451 - [User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM](https://agentprime.io/advisories/CVE-2021-27414.md) `CVE-2021-27414` · CVE record: Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2022 · Tags: CWE-451 - [Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0](https://agentprime.io/advisories/GHSA-fmvm-x8mv-47mj.md) `GHSA-fmvm-x8mv-47mj`, `CVE-2022-23646` · npm `next`: affected `>=10.0.0, <12.1.0`, fixed in `12.1.0` · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2022 · Tags: CWE-451 - [UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user](https://agentprime.io/advisories/CVE-2021-41598.md) `CVE-2021-41598` · CVE record: GitHub GitHub Enterprise Server · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-451 - [Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.](https://agentprime.io/advisories/CVE-2021-33593.md) `CVE-2021-33593` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 2 Nov 2021 · Tags: CWE-451 - [UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources](https://agentprime.io/advisories/CVE-2021-22866.md) `CVE-2021-22866` · CVE record: GitHub GitHub Enterprise Server · No CVSS score · Not analysed yet · Published 14 May 2021 · Tags: CWE-451 - [Raise IT Solutions RITS Browser Address Bar Spooofing](https://agentprime.io/advisories/CVE-2020-7371.md) `CVE-2020-7371` · CVE record: Raise IT Solutions RITS Browser · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2020 · Tags: CWE-451 - [Danyil Vasilenko Bolt Browser Address Bar Spooofing](https://agentprime.io/advisories/CVE-2020-7370.md) `CVE-2020-7370` · CVE record: Danyil Vasilenko Bolt Browser · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2020 · Tags: CWE-451 - [Yandex Browser Address Bar Spooofing](https://agentprime.io/advisories/CVE-2020-7369.md) `CVE-2020-7369` · CVE record: Yandex Yandex Browser · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2020 · Tags: CWE-451 - [UCWeb UC Browser Address Bar Spooofing](https://agentprime.io/advisories/CVE-2020-7364.md) `CVE-2020-7364` · CVE record: UCWeb UC Browser · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2020 · Tags: CWE-451 - [UCWeb UC Browser Address Bar Spooofing](https://agentprime.io/advisories/CVE-2020-7363.md) `CVE-2020-7363` · CVE record: UCWeb UC Browser · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2020 · Tags: CWE-451 - [ovirt-engine: An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier…](https://agentprime.io/advisories/CVE-2020-10775.md) `CVE-2020-10775` · CVE record: ovirt-engine · No CVSS score · Not analysed yet · Published 24 Aug 2020 · Tags: CWE-451 - [Nextcloud Server: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability…](https://agentprime.io/advisories/CVE-2017-0888.md) `CVE-2017-0888` · CVE record: Nextcloud Nextcloud Server · No CVSS score · Not analysed yet · Published 5 Apr 2017 · Tags: CWE-451 - [Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate…](https://agentprime.io/advisories/CVE-2016-9473.md) `CVE-2016-9473` · CVE record: Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier · No CVSS score · Not analysed yet · Published 28 Mar 2017 · Tags: CWE-451 - [Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app.](https://agentprime.io/advisories/CVE-2016-9468.md) `CVE-2016-9468` · CVE record: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 · No CVSS score · Not analysed yet · Published 28 Mar 2017 · Tags: CWE-451 - [Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app.](https://agentprime.io/advisories/CVE-2016-9467.md) `CVE-2016-9467` · CVE record: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 · No CVSS score · Not analysed yet · Published 28 Mar 2017 · Tags: CWE-451 - [Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app.](https://agentprime.io/advisories/CVE-2016-9460.md) `CVE-2016-9460` · CVE record: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 · No CVSS score · Not analysed yet · Published 28 Mar 2017 · Tags: CWE-451 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .