Lucene search
+L

2020 matches found

BDU FSTEC
BDU FSTEC
•added 2022/09/28 12:00 a.m.•10 views

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from incorrect restrictions on the number of user interface layers or frames that can be displayed. This allows attackers to perform spoofing attacks.

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to an incorrect limitation on the number of user interface layers or frames that can be displayed. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

7.8CVSS7AI score0.01113EPSS
SaveExploits0References16Affected Software11
OPENSUSE Linux
OPENSUSE Linux
•added 2022/09/17 12:00 a.m.•52 views

Security update for mupdf (moderate)

openSUSE Security Update: Security update for mupdf Announcement ID: openSUSE-SU-2022:10126-1 Rating: moderate References: 1202858 Cross-References: CVE-2018-25032 CVE-2021-4216 CVSS scores: CVE-2018-25032 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-25032 SUSE: 8.1...

8.1CVSS6.5AI score0.51733EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/09/14 12:00 a.m.•14 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to improper limitation of the number of user interface layers that can be rendered, allows attackers to compromise data integrity.

The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

7.1CVSS6.5AI score0.01623EPSS
SaveExploits0References8Affected Software5
OSV
OSV
•added 2022/09/09 12:00 a.m.•22 views

GHSA-M379-X4XC-38X9 rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames

rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This iss...

9.3CVSS8.6AI score0.01165EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/09/08 7:15 p.m.•7 views

CVE-2022-3167

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...

10CVSS7.3AI score0.01165EPSS
SaveExploits1References3
PyPA
PyPA
•added 2022/09/08 7:15 p.m.•9 views

PYSEC-2022-268

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...

10CVSS6.7AI score0.01165EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/08 12:00 a.m.•3 views

CVE-2022-3167: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...

10CVSS8.2AI score0.01165EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•25 views

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.4.1, which stems from improper restriction of rendered UI layers or fram...

10CVSS8.2AI score0.01165EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/08/23 4:15 p.m.•8 views

CVE-2022-2965

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

6.4CVSS5.9AI score0.00724EPSS
SaveExploits1References3
Prion
Prion
•added 2022/08/23 4:15 p.m.•32 views

Input validation

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

4.3CVSS4.6AI score0.00724EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/08/23 3:40 p.m.•83 views

CVE-2022-2965

CVE-2022-2965 affects notrinos/notrinoserp (a PHP/MySQL web ERP) prior to version 0.7. The root cause is improper restriction of rendered UI layers/frames (missing X-Frame-Options), enabling clickjacking that could lead to actions such as deleting a user account from the admin context. Public sou...

6.4CVSS6.2AI score0.00724EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/08/23 12:00 a.m.•16 views

PT-2022-19754 · Unknown · Notrinos/Notrinoserp

Name of the Vulnerable Software and Affected Versions: notrinos/notrinoserp versions prior to 0.7 Description: The issue is related to improper restriction of rendered UI layers or frames. Recommendations: For versions prior to 0.7, update to version 0.7 or later to resolve the issue...

6.4CVSS5.2AI score0.00724EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•7 views

CVE-2022-2965: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

6.4CVSS6.2AI score0.00724EPSS
SaveExploits1References2
Rockylinux
Rockylinux
•added 2022/08/15 1:29 p.m.•35 views

vulkan bug fix and enhancement update

An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

0.8AI score
SaveExploits0
Snyk
Snyk
•added 2022/08/11 11:43 a.m.•1 views

Malicious Package

Overview @uc-maps/tile-layers.react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

9.8CVSS7.1AI score
SaveExploits0References3
NVD
NVD
•added 2022/08/09 1:15 p.m.•34 views

CVE-2022-2734

Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...

10CVSS0.00847EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/09 12:00 a.m.•8 views

CVE-2022-2734: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1...

10CVSS7.3AI score0.00847EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/08/08 12:00 a.m.•17 views

The vulnerability of the software web interface of Cisco Webex Meetings allows a perpetrator to compromise data integrity.

The vulnerability of Cisco Webex Meetings software’s web interface is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

5CVSS6.5AI score0.00515EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/01 12:00 a.m.•4 views

CVE-2022-34162: Improper Restriction of Rendered UI Layers or Frames

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

6.1CVSS6.1AI score0.00863EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:55 a.m.•19 views

[SECURITY] Fedora 36 Update: golang-github-appc-docker2aci-0.17.2-10.fc36

Docker2aci is a small library and CLI binary that converts Docker images to A CI. It takes as input either a file generated by "docker save" or a Docker regist ry URL. It gets all the layers of a Docker image and squashes them into an ACI image. Optionally, it can generate one ACI for each layer,...

7.3AI score
SaveExploits0
Rows per page
Query Builder