CWE-451.

Mozilla Firefox: A malicious website that could create a popup could have resized the popup to overlay the…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-451

Mozilla Firefox: When resizing a popup after requesting fullscreen access…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-451

Mozilla Firefox: Under certain circumstances, a JavaScript alert (or prompt) could have been shown while…

• Mozilla Firefox
• CWE-451

In strings.xml, there is a possible permission bypass due to a misleading string.

• Android
• CWE-451

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below.

• CWE-451

Google Chrome: Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a…

• Google Chrome
• CWE-451

mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

• mailcow-dockerized
• Information disclosure
• CWE-451

The issue was addressed with improved UI handling.

• Apple macOS
• Apple tvOS
• CWE-451

SourceCodester Gym Management System clickjacking

• SourceCodester Gym Management System
• CWE-451

HCL Sametime is vulnerable to clickjacking

• HCL Software Sametime
• CWE-451

User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM

• Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM)
• CWE-451

Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0

• CWE-451

>=10.0.0, <12.1.0 · fixed in 12.1.0

UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user

• GitHub Enterprise Server
• CWE-451

Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.

• NAVER Whale browser
• CWE-451

UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources

• GitHub Enterprise Server
• CWE-451

Raise IT Solutions RITS Browser Address Bar Spooofing

• Raise IT Solutions RITS Browser
• CWE-451

Danyil Vasilenko Bolt Browser Address Bar Spooofing

• Danyil Vasilenko Bolt Browser
• CWE-451

Yandex Browser Address Bar Spooofing

• Yandex Browser
• CWE-451

UCWeb UC Browser Address Bar Spooofing

• UCWeb UC Browser
• CWE-451

UCWeb UC Browser Address Bar Spooofing

• UCWeb UC Browser
• CWE-451

ovirt-engine: An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier…

• ovirt-engine
• CWE-451

Nextcloud Server: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability…

• Nextcloud Server
• CWE-451

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate…

• Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier
• CWE-451

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app.

• Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2
• CWE-451

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app.

• Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2
• CWE-451

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app.

• Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4
• CWE-451