Advisories · Weakness

CWE-451.

Every Advisory and CVE whose sources give the weakness CWE-451, newest first.

CVE-2025-46394 CVE record

CVSS 3.2 Low

BusyBox: In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing…
- BusyBox
- CWE-451
Not analysed yet 23 Apr 2025
CVE-2025-3523 CVE record

CVSS 6.4 Medium

User Interface (UI) Misrepresentation of attachment URL
- Mozilla Thunderbird
- CWE-451
Not analysed yet 15 Apr 2025
CVE-2025-32371 CVE record

CVSS 4.3 Medium

Unexpected external content may be displayed in DNN ImageHandler
- dnnsoftware Dnn.Platform
- CWE-451
Not analysed yet 9 Apr 2025
CVE-2025-29796 CVE record

CVSS 4.7 Medium

Microsoft Edge for iOS Spoofing Vulnerability
- Microsoft Edge for iOS
- CWE-451
Not analysed yet 4 Apr 2025
CVE-2025-3074 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed…
- Google Chrome
- CWE-451
Not analysed yet 2 Apr 2025
CVE-2025-3073 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed…
- Google Chrome
- CWE-451
Not analysed yet 2 Apr 2025
CVE-2025-3072 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52…
- Google Chrome
- CWE-451
Not analysed yet 2 Apr 2025
CVE-2025-30467 CVE record

CVSS 4.3 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 31 Mar 2025
CVE-2024-54558 CVE record

CVSS 2.8 Low

A clickjacking issue was addressed with improved out-of-process view handling.
- Apple iOS and iPadOS
- Apple macOS
- CWE-451
Not analysed yet 10 Mar 2025
CVE-2025-1922 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Selection in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 5 Mar 2025
CVE-2025-21259 CVE record

CVSS 5.3 Medium

Microsoft Outlook Spoofing Vulnerability
- Microsoft Outlook for Android
- CWE-451
Not analysed yet 11 Feb 2025
CVE-2025-21253 CVE record

CVSS 5.3 Medium

Microsoft Edge for IOS and Android Spoofing Vulnerability
- Microsoft Edge for Android
- Microsoft Edge for iOS
- CWE-451
Not analysed yet 6 Feb 2025
CVE-2025-21404 CVE record

CVSS 4.3 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-449
- CWE-451
Not analysed yet 6 Feb 2025
CVE-2025-0451 CVE record

CVSS 6.3 Medium

Google Chrome: Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Feb 2025
CVE-2025-0729 CVE record

CVSS 6.9 Medium

TP-Link TL-SG108E clickjacking
- TP-Link TL-SG108E
- CWE-451
Not analysed yet 27 Jan 2025
CVE-2025-21262 CVE record

CVSS 5.4 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 24 Jan 2025
CVE-2025-0446 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83…
- Google Chrome
- CWE-451
Not analysed yet 15 Jan 2025
CVE-2025-0435 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Navigation in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 15 Jan 2025
CVE-2025-21314 CVE record

CVSS 6.5 Medium

Windows SmartScreen Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-451
Not analysed yet 14 Jan 2025
CVE-2024-55896 CVE record

CVSS 5.4 Medium

IBM PowerHA SystemMirror for i clickjacking
- i
- CWE-451
Not analysed yet 3 Jan 2025
CVE-2020-9236 CVE record

CVSS 8.8 High

There is an improper interface design vulnerability in Huawei product.
- Huawei FusionCompute
- CWE-451
Not analysed yet 27 Dec 2024
thorsten/phpmyfaq Packagist

CVSS 4.9 Medium

thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames
- CWE-451
<3.2.10 · fixed in 3.2.10

GHSA-m3r7-8gw7-qwvc · CVE-2024-55889 Not analysed yet 13 Dec 2024
CVE-2024-52271 CVE record

CVSS 8.2 High

PDF Document Spoofing in Documenso
- Documenso
- Documenso SaaS (Hosted)
- CWE-451
Not analysed yet 5 Dec 2024
CVE-2024-52270 CVE record

CVSS 8.2 High

PDF Document Spoofing in DropBox Sign(HelloSign)
- DropBox(HelloSign) DropBox Sign
- CWE-451
Not analysed yet 5 Dec 2024
CVE-2024-52269 CVE record

CVSS 8.2 High

AI Assistant PDF Document Spoofing in DocuSign
- DocuSign
- CWE-451
Not analysed yet 4 Dec 2024
CVE-2024-52277 CVE record

CVSS 8.2 High

PDF Document Spoofing in DocuSeal
- DocuSeal
- CWE-451
Not analysed yet 4 Dec 2024
CVE-2024-52276 CVE record

CVSS 8.2 High

PDF Document Spoofing in DocuSign
- DocuSign
- CWE-451
Not analysed yet 4 Dec 2024
CVE-2024-49040 CVE record

CVSS 7.5 High

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 13
- Microsoft Exchange Server 2019 Cumulative Update 14
- CWE-451
Not analysed yet 12 Nov 2024
CVE-2024-51749 CVE record

CVSS 3.5 Low

Element's thumbnails can be abused to misrepresent the content of an attachment
- element-hq element-web
- CWE-451
Not analysed yet 12 Nov 2024
CVE-2024-47044 CVE record

CVSS 5.3 Medium

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages.
- NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Hikari Denwa router RT-400MI
- NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Hikari Denwa router PR-400MI
- CWE-451
Not analysed yet 26 Sept 2024
CVE-2023-7282 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63…
- Google Chrome
- CWE-451
Not analysed yet 23 Sept 2024
CVE-2023-7281 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105…
- Google Chrome
- CWE-451
Not analysed yet 23 Sept 2024
CVE-2024-7020 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed…
- Google Chrome
- CWE-451
Not analysed yet 23 Sept 2024
CVE-2024-7019 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 23 Sept 2024
CVE-2024-8909 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed…
- Google Chrome
- CWE-451
Not analysed yet 17 Sept 2024
CVE-2024-43461 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-451
Not analysed yet 10 Sept 2024
CVE-2024-38197 CVE record

CVSS 6.5 Medium

Microsoft Teams for iOS Spoofing Vulnerability
- Microsoft Teams for iOS
- CWE-451
Not analysed yet 13 Aug 2024
CVE-2024-6999 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 6 Aug 2024
CVE-2024-7529 CVE record

CVSS 8.1 High

The date picker could partially obscure security prompts.
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
Not analysed yet 6 Aug 2024
CVE-2024-6595 CVE record

CVSS 3.0 Low

Uncontrolled Search Path Element in GitLab
- GitLab
- CWE-451
Not analysed yet 17 Jul 2024
CVE-2023-7011 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Picture in Picture in Google Chrome prior to…
- Google Chrome
- CWE-451
Not analysed yet 16 Jul 2024
CVE-2024-38112 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 Version 23H2
- CWE-451
Not analysed yet 9 Jul 2024
CVE-2024-6610 CVE record

CVSS 6.3 Medium

Form validation popups could block exiting full-screen mode
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 9 Jul 2024
CVE-2024-38082 CVE record

CVSS 4.7 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 20 Jun 2024
CVE-2024-38093 CVE record

CVSS 4.3 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 20 Jun 2024
CVE-2024-38313 CVE record

CVSS 4.3 Medium

Mozilla Firefox for iOS: In certain scenarios a malicious website could attempt to display a fake location URL bar…
- Mozilla Firefox for iOS
- CWE-451
Not analysed yet 13 Jun 2024
CVE-2024-5698 CVE record

CVSS 5.4 Medium

Mozilla Firefox: By manipulating the fullscreen feature while opening a data-list…
- Mozilla Firefox
- CWE-451
Not analysed yet 11 Jun 2024
CVE-2024-4950 CVE record

CVSS 5.3 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed…
- Google Chrome
- CWE-451
Not analysed yet 15 May 2024
CVE-2024-30055 CVE record

CVSS 5.4 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 10 May 2024
CVE-2024-23708 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed.
- Google Android
- CWE-451
Not analysed yet 7 May 2024
CVE-2024-2631 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Mar 2024
CVE-2023-50938 CVE record

CVSS 6.5 Medium

IBM PowerSC clickjacking
- IBM PowerSC
- CWE-451
Not analysed yet 2 Feb 2024
CVE-2024-0805 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed…
- Google Chrome
- CWE-451
Not analysed yet 23 Jan 2024
CVE-2024-0750 CVE record

CVSS 8.8 High

Mozilla Firefox: A bug in popup notifications delay calculation could have made it possible for an…
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-451
Not analysed yet 23 Jan 2024
CVE-2023-2941 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90…
- Google Chrome
- CWE-451
Not analysed yet 30 May 2023
CVE-2023-2938 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Picture In Picture in Google Chrome prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 May 2023
CVE-2023-2937 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Picture In Picture in Google Chrome prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 May 2023
CVE-2023-0700 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed…
- Google Chrome
- CWE-451
Not analysed yet 7 Feb 2023
CVE-2023-0130 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 10 Jan 2023
CVE-2022-45404 CVE record

CVSS 6.5 Medium

Mozilla Firefox ESR: Through a series of popup and <code>window.print()</code> calls…
- Mozilla Firefox ESR
- Mozilla Thunderbird
- CWE-451
Not analysed yet 22 Dec 2022