CVE-2019-11765: Incorrect Default Permissions

A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to lack of validation from the parent process, if the user accepted the permission request an attacker-controlled permission would be granted...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

Design/Logic Flaw

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2019-4742

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

CVE-2019-4742: Improper Restriction of Rendered UI Layers or Frames

IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

PT-2019-17152

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.0 Description A remote attacker could hijack the clicking action of a victim by persuading them to visit a malicious Web site, potentially launching further attacks against the victim. Recommendation...

Security Bulletin: IBM MQ Console is vulnerable to a Click-jacking attack. (CVE-2019-4285)

Summary The Liberty Admin Center, which is part of IBM WebSphere Liberty Profile used to host the IBM MQ Console, could allow a remote attacker to hijack the clicking action of the victim. Vulnerability Details CVEID: CVE-2019-4285 DESCRIPTION: IBM WebSphere Application Server - Liberty Admin...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Blink Rendering Module Disclosure

The vulnerability of Blink’s rendering module in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the no-click policy and disclose protected information through a specially created HTML page...

Office Click-to-Run Privilege Escalation

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

openSUSE Security Update : phpMyAdmin (openSUSE-2019-2599)

This update for phpMyAdmin fixes the following issues : phpMyAdmin was updated to 4.9.2 : - CVE-2019-18622: SQL injection in Designer feature boo1157614 - Fixes for 'Failed to set session cookie' error - Advisor with MySQL 8.0.3 and newer - Fix PHP deprecation errors - Fix a situation where...

CVE-2019-4215

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

Design/Logic Flaw

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

CVE-2019-4215

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

CVE-2019-4215

CVE-2019-4215 affects IBM Operations Analytics - Log Analysis versions 1.3.1 through 1.3.5 and is a clickjacking vulnerability. The IBM Security Bulletin details a vulnerability in Log Analysis that could allow a remote attacker to hijack the victim’s click actions by persuading them to visit a m...

CVE-2019-4215: Improper Restriction of Rendered UI Layers or Frames

IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...

8899.click Cross Site Scripting vulnerability

Security Researcher WhiteDevil Helped patch 67 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting 8899.click website and its users. Following coordinated an...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Nov 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...