Lucene search
+L

527 matches found

Cvelist
Cvelist
added 2024/10/31 12:54 p.m.47 views

CVE-2024-10454 Clickjacking vulnerability in Clibo Manager

Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerability occurs due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims...

6.1CVSS0.00226EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/31 12:54 p.m.59 views

CVE-2024-10454

The vulnerability is a clickjacking issue in Clibo Manager 1.1.9.12, exposed via the /public/login page and caused by a missing X-Frame-Options header. This could allow an attacker to overlay a transparent iframe and hijack user clicks. The PT-security entry confirms the affected version and dire...

6.1CVSS6.2AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/31 12:00 a.m.8 views

PT-2024-16294 · Unknown · Clibo Manager

Name of the Vulnerable Software and Affected Versions: Clibo Manager version 1.1.9.12 Description: A clickjacking issue occurs in the '/public/login' directory, a login panel, due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform...

6.1CVSS6.8AI score0.00226EPSS
SaveExploits0References7
Packet Storm
Packet Storm
added 2024/08/31 12:00 a.m.170 views

Android Open Source Platform (AOSP) Browser UXSS

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Open Source Platform AOSP Browser UXSS', 'Description' = %q This module exploits a Universal Cross-Site Scripting UXSS vulnerability...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/07/18 8:15 p.m.10 views

CVE-2024-30126

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

4.7CVSS5.8AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/18 8:15 p.m.31 views

CVE-2024-30126

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

4.7CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/18 7:17 p.m.41 views

CVE-2024-30126

CVE-2024-30126 affects HCL BigFix Compliance due to a missing X-Frame-Options HTTP header. The issue enables an attacker to host the target site in a frame/iframe, potentially tricking users into performing actions without their knowledge. Documented impact is limited to framing-related risks; no...

4.7CVSS4.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/18 7:17 p.m.13 views

CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

4.7CVSS6.8AI score0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/18 7:17 p.m.30 views

CVE-2024-30126 HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability

HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge...

4.7CVSS0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/18 12:00 a.m.9 views

PT-2024-23200 · Hcl · Hcl Bigfix Compliance

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance affected versions not specified Description: The issue is related to a missing X-Frame-Options HTTP header, which can allow an attacker to create a malicious website embedding the target website in a frame or iframe. Thi...

4.7CVSS6.8AI score0.0022EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/06/24 10:53 a.m.12 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2024/06/21 12:00 a.m.23 views

CentOS 7 : thunderbird (RHSA-2024:4016)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4016 advisory. - If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects...

8.6CVSS7.9AI score0.0107EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2024/06/20 5:29 p.m.12 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 10:36 a.m.13 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 8:23 a.m.11 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 6:52 a.m.11 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 6:02 a.m.15 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 5:52 a.m.8 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 5:42 a.m.9 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2024/06/20 5:29 a.m.7 views

Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window

The Mozilla Foundation Security Advisory describes this flaw as: By tricking the browser with a X-Frame-Options header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window...

4.7CVSS7.3AI score0.00654EPSS
SaveExploits0References6
Rows per page
Query Builder