Lucene search
K

3797 matches found

OSV
OSV
added 2023/12/31 10:15 a.m.2 views

CVE-2023-6093

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the...

6.1CVSS5.7AI score0.00253EPSS
Exploits0References1
NVD
NVD
added 2023/12/31 10:15 a.m.14 views

CVE-2023-6093

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the...

6.1CVSS0.00253EPSS
Exploits0References1
Prion
Prion
added 2023/12/31 10:15 a.m.17 views

Design/Logic Flaw

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the...

5.8CVSS7AI score0.00253EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/31 9:53 a.m.18 views

CVE-2023-6093 OnCell G3150A-LTE Series: Clickjacking Vulnerability

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the...

5.3CVSS6.2AI score0.00253EPSS
Exploits0References1
Debian
Debian
added 2023/12/29 10:8 a.m.30 views

[SECURITY] [DLA 3697-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3697-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 29, 2023 https://wiki.debian.org/LTS -...

8.8CVSS8.5AI score0.20472EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/12/29 12:0 a.m.3 views

PT-2023-8289 · Moxa · Oncell G3150A-Lte Series

Name of the Vulnerable Software and Affected Versions: OnCell G3150A-LTE Series firmware versions v1.3 and prior Description: A clickjacking vulnerability has been identified, caused by incorrectly restricting frame objects. This can lead to user confusion about which interface the user is...

6.1CVSS6.2AI score0.00253EPSS
Exploits0References11
Veracode
Veracode
added 2023/12/25 2:48 a.m.23 views

Click Jacking

Firefox is vulnerable to Click Jacking. The vulnerability is caused due to the fact that the timing of a button click causing a popup to disappear is approximately the same length as the anti-clickjacking delay on permission prompts. An attacker can exploit this to surprise users by luring them t...

6.1CVSS6.3AI score0.00683EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.3 views

The vulnerability of Firefox browsers, including Firefox ESR, relates to information representation errors in the user interface, which allows attackers to carry out clickjacking attacks.

The vulnerability of Firefox browsers and Firefox ESR lies in information representation errors at the user interface level. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

4.7CVSS6.7AI score0.00683EPSS
Exploits0References9Affected Software5
OpenVAS
OpenVAS
added 2023/12/21 12:0 a.m.17 views

Debian: Security Advisory (DSA-5581-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.9AI score0.20472EPSS
Exploits0References4
Debian
Debian
added 2023/12/20 7:23 p.m.60 views

[SECURITY] [DSA 5581-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5581-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2023 https://www.debian.org/security/faq -...

8.8CVSS7.1AI score0.20472EPSS
Exploits0
OSV
OSV
added 2023/12/20 2:4 p.m.5 views

SUSE-SU-2023:4929-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974 CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver bmo1843782. CVE-2023-6857: Symlinks may resolve to smaller than...

8.8CVSS8.4AI score0.20472EPSS
Exploits0References21
OSV
OSV
added 2023/12/20 2:2 p.m.2 views

SUSE-SU-2023:4928-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974. CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver bmo1843782. CVE-2023-6857: Symlinks may resolve to smaller tha...

8.8CVSS8.4AI score0.20472EPSS
Exploits0References21
RedhatCVE
RedhatCVE
added 2023/12/20 11:35 a.m.24 views

CVE-2023-6867

The Mozilla Foundation Security Advisory describes this flaw as: The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the...

6.1CVSS6.7AI score0.00683EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/12/20 2:9 a.m.3 views

SUSE CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerabili...

6.1CVSS8.5AI score0.00683EPSS
Exploits0References7
OSV
OSV
added 2023/12/20 12:0 a.m.2 views

UBUNTU-CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerabili...

6.1CVSS7.3AI score0.00683EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2023/12/20 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:4912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.3AI score0.20472EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2023/12/20 12:0 a.m.31 views

CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerabili...

6.1CVSS6.7AI score0.00683EPSS
Exploits0References7
OSV
OSV
added 2023/12/19 3:48 p.m.4 views

SUSE-SU-2023:4912-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry bsc1217974 CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver bmo1843782. CVE-2023-6857: Symlinks may resolve to smaller than...

8.8CVSS8.4AI score0.20472EPSS
Exploits0References21
OSV
OSV
added 2023/12/19 2:15 p.m.3 views

CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerabili...

6.1CVSS7.9AI score
Exploits0References6
NVD
NVD
added 2023/12/19 2:15 p.m.14 views

CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerabili...

6.1CVSS0.00683EPSS
Exploits0References6
Rows per page
Query Builder