Approved changes feed: RSS · Atom
cpe:2.3:a:the_browser_company_of_new_york:dia:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | The Browser Company Of New York (16d362a2-2d31-5757-bea7-bf51f612994f) |
|---|---|
| Product | Dia (76563b08-48ca-5b55-be5f-62ae7bdb4363) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15032 |
vulnerable | 2026-06-08 07:06:35.586283 |
CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank
HIGH (7.4)
Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site.
Published: 2026-01-16T18:11:32.153Z
Updated: 2026-01-16T18:35:45.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13132 |
vulnerable | 2026-06-08 07:04:31.675993 |
Dia: Increased Spoof Risk; Missing full screen toast
HIGH (7.4)
This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)
Published: 2025-11-21T17:55:52.758Z
Updated: 2025-11-21T18:08:38.229Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.