Lucene search
K

3796 matches found

Prion
Prion
added 2013/10/09 2:53 p.m.22 views

Code injection

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."...

6.8CVSS7.3AI score0.2964EPSS
Exploits0References4Affected Software2
Cvelist
Cvelist
added 2013/10/09 2:44 p.m.30 views

CVE-2013-3895

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."...

6.6AI score0.2964EPSS
Exploits0References4
CVE
CVE
added 2013/10/09 2:44 p.m.147 views

CVE-2013-3895

CVE-2013-3895 affects Microsoft SharePoint Server 2007 SP3 and SharePoint 2010 SP1/SP2. Described as a parameter-injection vulnerability that enables remote attackers to perform clickjacking via a crafted web page. Connected sources reference MS13-084 as the security update addressing these issue...

6.8CVSS6.7AI score0.2964EPSS
Exploits0References4Affected Software1
Symantec
Symantec
added 2013/10/08 12:0 a.m.41 views

Microsoft SharePoint CVE-2013-3895 Clickjacking Vulnerability

Description Microsoft SharePoint is prone to a clickjacking vulnerability. An attacker may leverage this issue to compromise the affected application or obtain sensitive information. Other attacks are also possible. Technologies Affected Microsoft Office SharePoint Server 2007 SP3 32-bit Microsof...

6.8CVSS5.9AI score0.2964EPSS
Exploits0References1Affected Software4
Microsoft KB
Microsoft KB
added 2013/10/08 12:0 a.m.18 views

MS13-084: Description of the security update for Word Online: October 8, 2013

This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...

6.8AI score
Exploits0
Microsoft KB
Microsoft KB
added 2013/10/08 12:0 a.m.13 views

MS13-084: Description of the security update for Word Automation Services in SharePoint Server 2010: October 8, 2013

Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...

6.8AI score
Exploits0
Microsoft KB
Microsoft KB
added 2013/10/08 12:0 a.m.27 views

MS13-084: Description of the security update for Excel Services in SharePoint Server 2013: October 8, 2013

Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...

6.7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2013/10/08 12:0 a.m.16 views

MS13-084: Description of the security update for Excel Services in Microsoft SharePoint Server 2010: October 8, 2013

This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...

6.7AI score
Exploits0
Microsoft KB
Microsoft KB
added 2013/10/08 12:0 a.m.14 views

MS13-084: Description of the security update for Excel Web App: October 8, 2013

Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...

6.8AI score
Exploits0
Cent OS
Cent OS
added 2013/10/07 12:45 p.m.71 views

samba3x security update

CentOS Errata and Security Advisory CESA-2013:1310 Updated samba3x packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scorin...

5.1CVSS6.8AI score0.69008EPSS
Exploits7References7
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.33 views

RedHat Update for samba3x RHSA-2013:1310-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.8AI score0.69008EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.33 views

RedHat Update for samba3x RHSA-2013:1310-01

Check for the Version of samba3x OpenVAS Vulnerability Test RedHat Update for samba3x RHSA-2013:1310-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5.1CVSS7.2AI score0.69008EPSS
Exploits7References2
NVD
NVD
added 2013/10/02 10:55 p.m.26 views

CVE-2013-4066

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...

4.3CVSS6.5AI score0.01168EPSS
Exploits0References3
Prion
Prion
added 2013/10/02 10:55 p.m.15 views

Design/Logic Flaw

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...

4.3CVSS7AI score0.01168EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/10/02 10:0 p.m.28 views

CVE-2013-4066

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface...

6.5AI score0.01168EPSS
Exploits0References3
CVE
CVE
added 2013/10/02 10:0 p.m.52 views

CVE-2013-4066

CVE-2013-4066 affects IBM InfoSphere Information Server 8.0, 8.1, 8.5 (FP3), 8.7 and 9.1. An attacker can perform a clickjacking attack by overlaying the Web Console and tricking the user into clicking. IBM’s bulletin lists fixes per version: 8.0/8.1 fixes, 8.5 FP3, 8.7 FP2, and 9.1 upgrade to 9....

4.3CVSS6.7AI score0.01168EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2013/10/01 8:55 p.m.20 views

CVE-2013-5975

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

4.3CVSS6.7AI score0.01803EPSS
Exploits0References3
Prion
Prion
added 2013/10/01 8:55 p.m.15 views

Code injection

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

4.3CVSS7.1AI score0.01803EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/10/01 8:0 p.m.25 views

CVE-2013-5975

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

6.7AI score0.01803EPSS
Exploits0References3
CVE
CVE
added 2013/10/01 8:0 p.m.46 views

CVE-2013-5975

The CVE-2013-5975 issue concerns the Access Policy Manager logon.inc page in F5 BIG-IP APM, where 11.1.0–11.2.1 are vulnerable to clickjacking via unspecified vectors. The associated advisory (K14700) confirms vulnerable APM 11.1.0–11.2.1 and notes that the vulnerability was addressed in BIG-IP A...

4.3CVSS6.8AI score0.01803EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder