Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2020-23037)

Siemens Scalance X-200 is an industrial Ethernet switch from Siemens, Germany. An input validation error vulnerability exists in multiple Siemens products, which can be exploited by attackers to hijack click-through actions by other users...

CVE-2019-4548

IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against...

Design/Logic Flaw

IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against...

CVE-2019-4548

IBM Security Directory Server 6.4.0 is affected by CVE-2019-4548, a clickjacking vulnerability that could allow a remote attacker to hijack a victim’s single-click action by enticing the user to visit a malicious website. The issue affects the affected product version 6.4.0 and can enable an atta...

CVE-2019-4548

IBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against...

click-wow.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting click-wow.ru website and its users. Following coordinated...

Thinkphp5 applet one-click generation platform has file upload vulnerability

Thinkphp5 small program one-click generation platform is a small program one-click generation system source code. A file upload vulnerability exists in Thinkphp5 Applet One Click Generation Platform. An attacker can exploit this vulnerability to upload a webshell and gain server privileges...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

Design/Logic Flaw

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

Security Bulletin: IBM MQ Console is vulnerable to a Click-jacking attack. (CVE-2019-4285)

Summary The Liberty Admin Center, which is part of IBM WebSphere Liberty Profile used to host the IBM MQ Console, could allow a remote attacker to hijack the clicking action of the victim. Vulnerability Details CVEID: CVE-2019-4285 DESCRIPTION: IBM WebSphere Application Server - Liberty Admin...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of Blink’s rendering module in Google Chrome browsers allows attackers to circumvent the no-clicking policy and disclose the protected information.

The vulnerability of Blink’s rendering module in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the no-click policy and disclose protected information through a specially created HTML page...

openSUSE Security Update : phpMyAdmin (openSUSE-2019-2599)

This update for phpMyAdmin fixes the following issues : phpMyAdmin was updated to 4.9.2 : - CVE-2019-18622: SQL injection in Designer feature boo1157614 - Fixes for 'Failed to set session cookie' error - Advisor with MySQL 8.0.3 and newer - Fix PHP deprecation errors - Fix a situation where...

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

CVE-2019-4215

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

Design/Logic Flaw

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

CVE-2019-4215

CVE-2019-4215 affects IBM Operations Analytics - Log Analysis versions 1.3.1 through 1.3.5 and is a clickjacking vulnerability. The IBM Security Bulletin details a vulnerability in Log Analysis that could allow a remote attacker to hijack the victim’s click actions by persuading them to visit a m...