Lucene search
+L

4592 matches found

osv_cve
osv_cve
•added 2026/01/15 9:16 p.m.•22 views

CVE-2025-52987

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/15 8:10 p.m.•15 views

CVE-2025-52987

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.5AI score0.00275EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/15 8:10 p.m.•48 views

CVE-2025-52987

CVE-2025-52987 is a clickjacking vulnerability in Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) caused by the web portal failing to set proper X-Frame-Options and X-Content-Type headers. Affected are all Paragon Automation versions prior to 24.1.1. Practical impact described...

6.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/01/15 8:10 p.m.•50 views

CVE-2025-52987 Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS0.00275EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/15 8:10 p.m.•10 views

CVE-2025-52987 Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/15 8:10 p.m.•17 views

EUVD-2026-2709

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS6.4AI score0.00275EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2026/01/15 4:33 p.m.•9 views

SUSE-SU-2026:20086-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR bsc1256340. - MFSA 2026-03 bsc1256340 CVE-2026-0877: Mitigation bypass in the DOM: Security component CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphic...

9.8CVSS6.7AI score0.00543EPSS
SaveExploits0References15
NVD
NVD
•added 2026/01/15 1:16 p.m.•17 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

8.2CVSS0.00319EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/01/15 1:08 p.m.•6 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

4.3CVSS5.8AI score0.00319EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/01/15 1:08 p.m.•14 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

8.2CVSS5.5AI score0.00319EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/01/15 1:08 p.m.•46 views

CVE-2026-22918

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

4.3CVSS0.00319EPSS
SaveExploits0References6
CVE
CVE
•added 2026/01/15 1:08 p.m.•39 views

CVE-2026-22918

CVE-2026-22918 describes missing protection against clickjacking that could allow an attacker to trick users into performing unintended actions on malicious pages, potentially leading to the extraction of sensitive data. The core description is echoed across multiple connected sources (NVD, Red H...

8.2CVSS5.8AI score0.00319EPSS
SaveExploits0References6Affected Software1
RedHat Linux
RedHat Linux
•added 2026/01/15 11:53 a.m.•13 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.5AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/01/15 11:53 a.m.•22 views

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.8CVSS6.7AI score0.00543EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
•added 2026/01/15 8:26 a.m.•28 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.5AI score0.00326EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•19 views

PT-2026-2999

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, potentially leading to the extraction of...

4.3CVSS6.3AI score0.00319EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/15 12:00 a.m.•9 views

CVE-2025-52987: Improper Restriction of Rendered UI Layers or Frames

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting wit...

6.1CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/15 12:00 a.m.•10 views

CVE-2026-22918: Improper Restriction of Rendered UI Layers or Frames

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

8.2CVSS5.8AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•23 views

Juniper Networks Paragon Automation security vulnerabilities

Juniper Networks Paragon Automation is an automation and operations platform provided by the American company Juniper Networks. Versions of Juniper Networks Paragon Automation prior to 24.1.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of appropriate...

6.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/15 12:00 a.m.•30 views

PT-2026-3103

Name of the Vulnerable Software and Affected Versions Juniper Networks Paragon Automation Pathfinder, Planner, Insights versions prior to 24.1.1 Description A clickjacking issue exists in the web portal of Juniper Networks Paragon Automation Pathfinder, Planner, Insights. This is due to the...

6.1CVSS6.5AI score0.00275EPSS
SaveExploits0References6
Rows per page
Query Builder