Design/Logic Flaw

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-8972

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-8971

CVE-2017-8971 is a documented clickjacking vulnerability in HP Matrix Operating Environment (MOE) version 7.6 LR1. The connected sources identify HP MOE as the affected product and characterize the issue as a clickjacking vulnerability in its web-facing interface. The NVD entry provides CVSS scor...

CVE-2017-5780

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5780

CVE-2017-5780 concerns a remote clickjacking vulnerability in Hewlett Packard Enterprise’s HPE Matrix Operating Environment (MEO) software. Connected data confirms the affected components are HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). The r...

CVE-2017-8972

A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...

CVE-2017-8971

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-5783

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5783

CVE-2017-5783 describes a remote clickjacking vulnerability affecting HPE Matrix Operating Environment (MEO) v7.6 (and SIM 7.6 per CNVD). The root cause involves a clickjacking weakness that could allow a remote attacker to hijack click-to-operate sessions. Exploit specifics, affected subcomponen...

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

Code injection

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

CVE-2017-18088

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

CVE-2017-18088

The CVE-2017-18088 issue affects Atlassian Bitbucket Server prior to fixed versions: 5.3.7 (5.3.x), 5.4.0–5.4.5 (5.4.x), 5.5.0–5.5.5 (5.5.x), 5.6.0–5.6.2 (5.6.x), 5.7.0–5.7.0 (5.7.x), and prior to 5.8.0. The underlying problem is lack of clickjacking protection on various plugin servlet resources...

Coinbase: Prepopulation of email address and name leaks information provided to other merchants

Users of the commerce widget that have entered their name and email into the widget and moved to the currency selection step were vulnerable to a clickjacking attack that revealed name and email to an attacker due to pre-population of the widget's fields. After a user filled out the name / email...

Clickjacking Attack

superset is vulnerable to clickjacking attacks. The library does not restrict requests from a different origin, allowing a malicious user to inject and execute arbitrary SQL commands...

Debian: Security Advisory (DLA-1119-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Rational DOORS Web Access Clickjacking Vulnerability

IBM Rational DOORS is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM in the United States. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

Magento Commerce - CSRLF Web UI Security Vulnerability

Document Title: =============== Magento Commerce - CSRLF Web UI Security Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1573 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID: ==================================== 157...

Magento Commerce - CSRLF Web UI Security Vulnerability

Document Title: =============== Magento Commerce - CSRLF Web UI Security Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1573 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID: ==================================== 157...