7450 matches found
CVE-2013-6344
The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...
Cross site scripting
The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...
CVE-2013-6344
The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...
CVE-2013-6344
CVE-2013-6344 affects the ZCC page in Novell ZENworks Configuration Management (ZCM) prior to version 11.2.4. The issue is described as a cross-frame scripting vulnerability with unknown vectors, enabling attackers to perform cross-frame scripting attacks. The connected records confirm this is ti...
Novell ZENworks Configuration Management < 11.2.4 Multiple Vulnerabilities
The version of Novell ZENworks Configuration Management installed on the remote host can be tricked into disclosing any file readable by the Novell ZENworks umaninv service, and as such it is affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows any file...
OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous...
OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user...
Google Releases Google Chrome 30.0.1599.101
Google has released Google Chrome 30.0.1599.101 for Windows, Mac, Linux and Chrome Frame operating systems to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to cause a denial-of-service condition or trigger multiple conflicting uses of the same object. US-CE...
Stable Channel Update
Chrome has been updated to 30.0.1599.101 for Windows, Mac, Linux and Chrome Frame. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library...
Apple QuickTime MJPEG Frame stsd Atom Heap Overflow (CVE-2013-1020)
A heap overflow vulnerability exists in Apple QuickTime...
CVE-2013-5523
The Sponsor Portal in Cisco Identity Services Engine ISE 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS"...
CVE-2013-5523
The Sponsor Portal in Cisco Identity Services Engine ISE 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS"...
Cisco Identity Services Engine Sponsor Portal Cross-Frame Scripting Vulnerability
A vulnerability in the Sponsor Portal of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a...
Cisco Prime LAN Management Solution Cross-Frame Scripting
The version of Cisco Prime LAN Management Solution installed on the remote host is affected by a cross-frame scripting vulnerability due to insufficient filtering of user-supplied input. An attacker could leverage this to direct a user to an attacker controlled page and conduct clickjacking or...
Stable Channel Update
The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...
Implement clickjacking protection on https://answers.atlassian.com/
We received an external security report from Monendra Sahu that https://answers.atlassian.com/ is vulnerable to clickjacking|http://en.wikipedia.org/wiki/Clickjacking. This can be fixed by sending a X-Frame-Options header with a value of SAMEORIGIN. This will prevent answers from being displayed ...
Implement clickjacking protection on https://answers.atlassian.com/
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46884. panel We received an external security report from Monendra Sahu that https://answers.atlassian.com/ is vulnerable to...
Implement clickjacking protection on https://answers.atlassian.com/
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-46884. panel We received an external security report from Monendra Sahu that https://answers.atlassian.com/ is vulnerable to...
Implement clickjacking protection on https://answers.atlassian.com/
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46884. panel We received an external security report from Monendra Sahu that https://answers.atlassian.com/ is vulnerable to...