Lucene search
+L

3891 matches found

Hacker One
Hacker One
added 2016/03/15 1:23 a.m.32 views

New Relic: newrelic.com vulnerable to clickjacking !

Hello Security, Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking contro...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2016/03/10 12:00 a.m.36 views

Ubuntu: Security Advisory (USN-2922-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.12938EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2016/03/10 12:00 a.m.37 views

activemq -- Web Console Clickjacking

Michael Furman reports: The web based administration console does not set the X-Frame-Options header in HTTP responses. This allows the console to be embedded in a frame or iframe which could then be used to cause a user to perform an unintended action in the console...

6.1CVSS6.6AI score0.08618EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/03/09 12:00 a.m.30 views

Ubuntu 14.04 LTS : Samba vulnerabilities (USN-2922-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2922-1 advisory. Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs...

6.5CVSS6.7AI score0.12938EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2016/03/08 1:51 p.m.83 views

USN-2922-1: Samba vulnerabilities

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. CVE-2015-7560 Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT...

6.5CVSS6.4AI score0.12938EPSS
SaveExploits0
Hacker One
Hacker One
added 2016/03/01 5:44 p.m.18 views

LeaseWeb: Found clickjacking vulnerability

Hello Security, Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking contro...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/02/26 12:00 a.m.35 views

WordPress < 3.1.3 Multiple Vulnerabilities

Binary data 9108.prm...

10CVSS6.8AI score0.02573EPSS
SaveExploits0References8
CNVD
CNVD
added 2016/02/22 12:00 a.m.10 views

Citrix Systems NetScaler Application Delivery Controller and NetScaler Gateway Clickjacking Vulnerability

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions; NetScaler Gateway is a secure remote access solution. A clickjacking vulnerability exists in Citrix Systems NetScaler ADC and NetScaler Gateway, which allows an attacker to construct malicious URIs, trick users...

6.1CVSS6.9AI score0.01051EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/02/19 12:00 a.m.15 views

Apache Solr 5.3.x 'LoadAdminUiServlet.java' Clickjacking Weakness

Binary data 9078.prm...

7.3AI score
SaveExploits0References2
OSV
OSV
added 2016/02/17 3:59 p.m.5 views

CVE-2016-2072

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.1CVSS5.8AI score0.01051EPSS
SaveExploits0References2
NVD
NVD
added 2016/02/17 3:59 p.m.25 views

CVE-2016-2072

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.1CVSS6.2AI score0.01051EPSS
SaveExploits0References2
Prion
Prion
added 2016/02/17 3:59 p.m.17 views

Code injection

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

4.3CVSS7.2AI score0.01051EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/02/17 3:00 p.m.30 views

CVE-2016-2072

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.5AI score0.01051EPSS
SaveExploits0References2
CVE
CVE
added 2016/02/17 3:00 p.m.55 views

CVE-2016-2072

Citrix NetScaler ADC and NetScaler Gateway are affected by a clickjacking vulnerability in the Administrative Web Interface. Affected product lines include Citrix NetScaler ADC/NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1. T...

6.1CVSS6.7AI score0.01051EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/02/09 12:00 a.m.30 views

Ubuntu 14.04 LTS : Firefox regression (USN-2880-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2880-2 advisory. USN-2880-1 fixed vulnerabilities in Firefox. This update introduced a regression which caused Firefox to crash on startup with some configurations. This update...

5.6AI score
SaveExploits0References1
CNVD
CNVD
added 2016/02/02 12:00 a.m.7 views

Unspecified vulnerability in Mozilla Firefox protocol-handler dialog box

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the protocol-handler dialog box in Mozilla Firefox versions prior to 44.0. The vulnerability can be exploited by remote attackers to conduct clickjacking...

6.1CVSS8.8AI score0.01256EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/02 12:00 a.m.9 views

Mozilla Firefox Clickjacking Attack Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the file-download dialog box in versions of Mozilla Firefox prior to 44.0 on the OS X platform, which is caused by a short interval between when the dialog bo...

6.1CVSS6.7AI score0.00854EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/02/02 12:00 a.m.6 views

An unspecified vulnerability exists in KDDI HOME SPOT CUBE devices.

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A security vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker could exploit the vulnerability to conduct clickjacking attacks...

6.1CVSS6.9AI score0.01009EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/31 6:59 p.m.5 views

CVE-2016-1941

The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended...

6.1CVSS5.7AI score0.00854EPSS
SaveExploits0References4
NVD
NVD
added 2016/01/31 6:59 p.m.17 views

CVE-2016-1941

The file-download dialog in Mozilla Firefox before 44.0 on OS X enables a certain button too quickly, which allows remote attackers to conduct clickjacking attacks via a crafted web site that triggers a single-click action in a situation where a double-click action was intended...

6.1CVSS6.2AI score0.00854EPSS
SaveExploits0References4
Rows per page
Query Builder