Lucene search
K

3795 matches found

Rockylinux
Rockylinux
added 2026/01/16 9:3 a.m.4 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

9.8CVSS7.3AI score0.0055EPSS
Exploits0
OSV
OSV
added 2026/01/16 9:3 a.m.5 views

RLSA-2026:0667 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox: thunderbird: Memor...

7.5CVSS6.9AI score0.0055EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.2 views

PT-2026-3318

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, The web application is vulnerable to clickjacking attacks. The WeGIA application does not send any defensive HTTP headers related to framing protection. In particular, X-Frame-Options is missing andContent-Security-Policy with...

4.3CVSS6.5AI score0.00272EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

RockyLinux 8 : firefox (RLSA-2026:0667)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0667 advisory. firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox:...

9.8CVSS5.7AI score0.0055EPSS
Exploits0References27
OSV
OSV
added 2026/01/15 9:16 p.m.2 views

CVE-2025-52987

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.8AI score0.00242EPSS
Exploits0References2
NVD
NVD
added 2026/01/15 9:16 p.m.3 views

CVE-2025-52987

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS0.00242EPSS
Exploits0References2
CVE
CVE
added 2026/01/15 8:10 p.m.18 views

CVE-2025-52987

CVE-2025-52987 is a clickjacking vulnerability in Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) caused by the web portal failing to set proper X-Frame-Options and X-Content-Type headers. Affected are all Paragon Automation versions prior to 24.1.1. Practical impact described...

6.1CVSS6.5AI score0.00242EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/15 8:10 p.m.24 views

CVE-2025-52987 Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS0.00242EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/15 8:10 p.m.4 views

EUVD-2026-2709

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS6.4AI score0.00242EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/15 8:10 p.m.3 views

CVE-2025-52987 Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS6.5AI score0.00242EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 8:10 p.m.4 views

CVE-2025-52987

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.5AI score0.00242EPSS
Exploits0References3
OSV
OSV
added 2026/01/15 4:33 p.m.2 views

SUSE-SU-2026:20086-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR bsc1256340. - MFSA 2026-03 bsc1256340 CVE-2026-0877: Mitigation bypass in the DOM: Security component CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphic...

9.8CVSS5.8AI score0.0055EPSS
Exploits0References15
NVD
NVD
added 2026/01/15 1:16 p.m.2 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

8.2CVSS0.00286EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/01/15 1:8 p.m.25 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

4.3CVSS0.00286EPSS
Exploits0References6
CVE
CVE
added 2026/01/15 1:8 p.m.11 views

CVE-2026-22918

CVE-2026-22918 describes missing protection against clickjacking that could allow an attacker to trick users into performing unintended actions on malicious pages, potentially leading to the extraction of sensitive data. The core description is echoed across multiple connected sources (NVD, Red H...

8.2CVSS6.4AI score0.00286EPSS
Exploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/15 1:8 p.m.1 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

4.3CVSS6.4AI score0.00286EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/01/15 1:8 p.m.4 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

8.2CVSS5.5AI score0.00286EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2026/01/15 11:53 a.m.2 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/15 11:53 a.m.6 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS7.3AI score0.0055EPSS
Exploits0References14
RedHat Linux
RedHat Linux
added 2026/01/15 8:26 a.m.3 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
Rows per page
Query Builder