Lucene search
+L

387 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/07/23 12:00 a.m.•6 views

CVE-2004-0721: Undefined Security Weakness

Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

7.5CVSS5.6AI score0.01619EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/07/23 12:00 a.m.•7 views

CVE-2004-0718: Undefined Security Weakness

The 1 Mozilla 1.6, 2 Firebird 0.7, 3 Firefox 0.8, and 4 Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

7.5CVSS5.6AI score0.01746EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/07/23 12:00 a.m.•8 views

CVE-2004-0719: Undefined Security Weakness

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

7.5CVSS5.6AI score0.05141EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
•added 2004/07/20 12:00 a.m.•34 views

Opera: Multiple spoofing vulnerabilities

Background Opera is a multi-platform web browser. Description Opera fails to remove illegal characters from an URI of a link and to check that the target frame of a link belongs to the same website as the link. Opera also updates the address bar before loading a page. Additionally, Opera contains...

2.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2002/12/11 5:00 a.m.•9 views

DEBIAN-CVE-2002-1335

Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...

4.3CVSS6AI score0.02478EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2001/09/12 4:00 a.m.•49 views

CVE-1999-1129

Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...

6.7AI score0.01588EPSS
SaveExploits0References4
CVE
CVE
•added 2001/09/12 4:00 a.m.•72 views

CVE-1999-1129

CVE-1999-1129 affects Cisco Catalyst 2900 VLAN switches. Affected component: VLAN trunking/tag handling. Root cause: attackers can forge the 802.1q VLAN identifier in the trunking tag, enabling remote injection of frames into another VLAN. Impact (as per the entry): partial confidentiality, integ...

7.5CVSS7.1AI score0.01588EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder