4620 matches found
IBM Financial Transaction Manager for SWIFT Services Multiple Security Vulnerabilities
Description IBM Financial Transaction Manager for SWIFT Services is prone to the following security vulnerabilities: 1. A clickjacking vulnerability 2. A cross-site scripting vulnerability 3. An information-disclosure vulnerability 4. A cross-site request-forgery vulnerability An attacker can...
McAfee Web Gateway Administrator Clickjacking
The vulnerability of the Administrator web console of the McAfee Web Gateway lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a clickjacking attack using a specially crafted web page...
Clickjacking Vulnerability Exists in Intesync Solismed
Intesync Solismed is a clinic management system designed for use by independent and free clinics. A clickjacking vulnerability exists in Intesync Solismed. An attacker can exploit this vulnerability to hijack user clicks and perform arbitrary actions on behalf of the user...
CVE-2019-15930
Intesync Solismed 3.3sp allows Clickjacking...
CVE-2019-15930
Intesync Solismed 3.3sp allows Clickjacking...
Security feature bypass
Intesync Solismed 3.3sp allows Clickjacking...
CVE-2019-15930
Intesync Solismed 3.3sp allows Clickjacking...
CVE-2019-15930
CVE-2019-15930: Intesync Solismed 3.3sp is affected by a clickjacking vulnerability. Multiple connected sources describe that an attacker could exploit this flaw to hijack user clicks and perform arbitrary actions on behalf of the user within Solismed. The Red Hat/CNVD/NVD entries corroborate the...
CVE-2019-15930: Improper Restriction of Rendered UI Layers or Frames
Intesync Solismed 3.3sp allows Clickjacking...
PT-2019-14475
Name of the Vulnerable Software and Affected Versions Intesync Solismed version 3.3sp Description The issue allows Clickjacking, which is a technique used to trick users into clicking on something different from what they perceive. Recommendations For version 3.3sp, consider implementing frame...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
Cross site scripting
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
CVE-2013-4968 concerns Puppet Enterprise prior to 3.0.1. According to the provided sources, remote attackers could trigger (1) clickjacking via vectors related to the console and (2) cross-site scripting (XSS) via vectors related to “live management.” The NVD entry notes these as web-related vuln...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
Removed by vendor...
CVE-2013-4968: Improper Neutralization of Input During Web Page Generation
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
PT-2019-6980
Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.0.1 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors related to the console, and cross-site scripting XSS attacks via unspecified vectors related to liv...