Lucene search
+L

7450 matches found

OSV
OSV
added 2014/05/06 2:55 p.m.7 views

UBUNTU-CVE-2014-0193

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...

5CVSS7.2AI score0.04326EPSS
SaveExploits0References3
NVD
NVD
added 2014/04/29 2:38 p.m.16 views

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

4.3CVSS6.7AI score0.0118EPSS
SaveExploits0References5
Prion
Prion
added 2014/04/29 2:38 p.m.15 views

Design/Logic Flaw

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

4.3CVSS7.2AI score0.0118EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2014/04/29 2:0 p.m.51 views

CVE-2013-7234

CVE-2013-7234 affects Simple Machines Forum (SMF). The vulnerability exists in SMF versions prior to 1.1.19 and prior to 2.0.6, where an improper handling of the page framing allows remote attackers to perform clickjacking via an X-Frame-Options header. The NVD entry lists this as a remote, heade...

4.3CVSS6.9AI score0.0118EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2014/04/29 2:0 p.m.29 views

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

6.7AI score0.0118EPSS
SaveExploits0References5
Prion
Prion
added 2014/04/23 11:52 a.m.24 views

Design/Logic Flaw

Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...

4.3CVSS7.2AI score0.01093EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2014/04/23 10:0 a.m.33 views

CVE-2012-3918

Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...

6.7AI score0.01093EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2014/04/21 10:10 a.m.30 views

Mail.ru: Clicjacking on Login panel

i am able to run on frame which lead to click jacking, Find Details on screen shot...

1.6AI score
SaveExploits0
Hacker One
Hacker One
added 2014/04/18 3:31 a.m.19 views

Respondly: x-frame options-sameorigin warning

As the x-frame options set to same-origin it still may be vulnerable to clickjacking attacks how? by using this code Better explanation: http://www.skeletonscribe.net/2012/06/x-frame-options-sameorigin-warning.html...

0.8AI score
SaveExploits0
Hacker One
Hacker One
added 2014/04/17 6:17 p.m.31 views

Localize: ClickJacking

It allows remote attackers to do some clickjacking which can be used for adding arbitrary tasks . Why? Almost all of your page has missing X-FRAME-OPTIONS header. Websites are at risk of a clickjacking attack when they allow content to be embedded within a frame. An attacker may use this risk to...

3.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2014/04/17 11:30 a.m.7 views

OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous...

4.3CVSS6.8AI score0.66817EPSS
SaveExploits1References6
OSV
OSV
added 2014/04/09 10:57 a.m.4 views

UBUNTU-CVE-2014-1718

Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/rendererhost/softwareframemanager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

7.5CVSS7.4AI score0.01571EPSS
SaveExploits1References8
securityvulns
securityvulns
added 2014/04/07 12:0 a.m.73 views

ESA-2014-020: RSA Adaptive Authentication (On-Premise) Multiple Vulnerabilities

ESA-2014-020.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-020: RSA Adaptive Authentication On-Premise Multiple Vulnerabilities EMC Identifier: ESA-2014-020 CVE Identifier: CVE-2014-0637, CVE-2014-0638 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected...

4.3CVSS0.5AI score0.00986EPSS
SaveExploits2
NVD
NVD
added 2014/04/04 3:9 p.m.25 views

CVE-2014-0638

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

4.3CVSS5.6AI score0.00986EPSS
SaveExploits1References1
Prion
Prion
added 2014/04/04 3:9 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

4.3CVSS6.1AI score0.00986EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2014/04/04 3:0 p.m.50 views

CVE-2014-0638

RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 are affected by Cross-Site Scripting and Cross-Frame Scripting vulnerabilities (CVE-2014-0638). The issue involves vectors using FRAME elements in the web application, enabling an attacker to inject arbitrary script or potenti...

4.3CVSS5.7AI score0.00986EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2014/04/04 3:0 p.m.29 views

CVE-2014-0638

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

5.6AI score0.00986EPSS
SaveExploits1References1
securityvulns
securityvulns
added 2014/03/27 12:0 a.m.31 views

EMC RSA Authentication Manager crossframe scripting

Self-Service Console cross frame scripting...

4.3CVSS3AI score0.00977EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2014/03/27 12:0 a.m.52 views

ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability

ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...

4.3CVSS0.1AI score0.00977EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2014/03/17 5:42 p.m.12 views

samba: clickjacking vulnerability in SWAT

The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...

5.1CVSS6.9AI score0.03248EPSS
SaveExploits0References4
Rows per page
Query Builder