CWE-451: User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user8.8 High
- naver whale browser, navercorp whale +1 moreWhale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an...5.3 Medium
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources8.8 High
- raise it solutions rits browserRaise IT Solutions RITS Browser Address Bar Spooofing4.3 Medium
- boltbrowser bolt browserDanyil Vasilenko Bolt Browser Address Bar Spooofing4.3 Medium
- yandex browserYandex Browser Address Bar Spooofing4.3 Medium
- ucweb uc browserUCWeb UC Browser Address Bar Spooofing4.3 Medium
- ucweb uc browserUCWeb UC Browser Address Bar Spooofing4.3 Medium
- redhat ovirt-engine, oracle virtualization +1 moreAn Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it...5.3 Medium
- hackerone nextcloud server, nextcloud, nextcloud server +2 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the ...4.3 Medium
- brave browserBrave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full...4.7 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...5.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...5.3 Medium
- nextcloud, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content...5.3 Medium