219 matches found
Cisco Unified Computing System on C-Series Rack Servers Cross-Frame Scripting Vulnerability
The Cisco Unified Computing System is an all-in-one platform for computing, virtualization, and networking. A cross-framework scripting vulnerability in Cisco Unified Computing System on C-Series Rack Servers allows attackers to hijack an attack via crafted website behavior...
Cisco UCS C-Series Rack Servers Integrated Management Controller Cross-Frame Scripting Vulnerability
A vulnerability in the web interface of the Cisco Integrated Management Controller of the Cisco Unified Computing System C-Series Rack Servers could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe...
SWFupload 2.5.0 - Cross Frame Scripting (XFS)
SWFupload 2.5.0 - Cross Frame Scripting XFS Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window...
SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability
Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...
SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability
Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...
SWFupload 2.5.0 Cross Frame Scripting
Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...
ESA-2014-020: RSA Adaptive Authentication (On-Premise) Multiple Vulnerabilities
ESA-2014-020.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-020: RSA Adaptive Authentication On-Premise Multiple Vulnerabilities EMC Identifier: ESA-2014-020 CVE Identifier: CVE-2014-0637, CVE-2014-0638 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected...
CVE-2014-0638
Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...
Cross site scripting
Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...
CVE-2014-0638
RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 are affected by Cross-Site Scripting and Cross-Frame Scripting vulnerabilities (CVE-2014-0638). The issue involves vectors using FRAME elements in the web application, enabling an attacker to inject arbitrary script or potenti...
CVE-2014-0638
Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...
EMC RSA Authentication Manager crossframe scripting
Self-Service Console cross frame scripting...
ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability
ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...
Cross site scripting
Cross-site scripting XSS vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross-frame scripting" issue...
CVE-2013-6327
Cross-site scripting XSS vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross-frame scripting" issue...
CVE-2013-6698
The web interface on Cisco Wireless LAN Controller WLC devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bu...
CVE-2013-6698
CVE-2013-6698 concerns the web interface of Cisco Wireless LAN Controller (WLC). The vulnerability stems from insufficient restrictions on iframe usage, enabling cross-frame scripting (XFS) and clickjacking-like attacks via a crafted page. Affected component is the WLC web UI; root cause is inade...
Cisco Wireless LAN Controller Cross-Frame Scripting Vulnerability
A vulnerability in the web interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a...