Lucene search
+L

3861 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.19 views

Security Bulletin: IBM WebSphere Business Services Fabric Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.18 views

Security Bulletin: WebSphere Dashboard Framework Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS CVEID: CVE-2013-1571 DESCRIPTION HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.3AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.22 views

Security Bulletin: WebSphere Dynamic Process Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.24 views

Security Bulletin: IBM WebSphere Lombardi Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.53 views

Security Bulletin: IBM Tivoli Security Policy Manager (TSPM) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TSPM contains a security vulnerability. The vulnerability allows an attacker to craft a malicious lin...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.54 views

Security Bulletin: IBM WebSphere Process Server Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software6
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.20 views

Security Bulletin: IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation that...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:6 p.m.25 views

Security Bulletin: IBM FileNet Records Manager/IBM InfoSphere Enterprise Records/IBM Enterprise Records Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
RedhatCVE
RedhatCVE
added 2022/09/21 3:49 p.m.57 views

CVE-2022-3260

The response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking attack.. Some browsers would interpret these results incorrectly, allowing clickjacking attacks...

6.5CVSS3.4AI score0.00432EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.39 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty shipped with IBM Business Process Manager and IBM Business Automation Workflow

Summary WebSphere Application Server Liberty is shipped as part of the optional components Process Federation Server since 8.5.6, and User Management Service since 18.0.0.1 in IBM Business Automation Workflow and IBM Business Process Manager. Information about security vulnerabilities affecting I...

5.8AI score0.42326EPSS
SaveExploits4Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.23 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server traditional and Liberty profile shipped with IBM Business Automation Workflow and IBM Business Process Manager (CVE-2021-39038)

Summary WebSphere Application Server traditional and WebSphere Application Server Liberty profile are shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional and...

5.4CVSS5.2AI score0.007EPSS
SaveExploits0Affected Software6
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.23 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server traditional and Liberty profile shipped with IBM Business Automation Workflow and IBM Business Process Manager (CVE-2021-39038)

Summary WebSphere Application Server traditional and WebSphere Application Server Liberty profile are shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional and...

5.2AI score0.007EPSS
SaveExploits0Affected Software6
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:2 p.m.17 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2019-4285)

Summary WebSphere Application Server Liberty is shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager Process Federation Server since 8.5.6 and User Management Service since 18.0.0.1. Information about a security vulnerability affecting IBM WebSphere...

5.6AI score0.01077EPSS
SaveExploits0Affected Software5
Github Security Blog
Github Security Blog
added 2022/09/09 12:0 a.m.29 views

rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames

rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This iss...

10CVSS8.3AI score0.00968EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/09/09 12:0 a.m.16 views

GHSA-M379-X4XC-38X9 rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames

rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This iss...

9.3CVSS8.6AI score0.00968EPSS
SaveExploits1References6
OSV
OSV
added 2022/09/08 1:15 p.m.8 views

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

6.1CVSS5.8AI score0.00603EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/08 1:15 p.m.6 views

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

6.1CVSS5.8AI score0.00603EPSS
SaveExploits0References4
NVD
NVD
added 2022/09/08 1:15 p.m.18 views

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

6.1CVSS0.00603EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/08 1:15 p.m.30 views

Design/Logic Flaw

DISPUTED Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

5.8CVSS6.2AI score0.00603EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/08 12:59 p.m.27 views

CVE-2022-36736

Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which allows attackers to perform a clickjacking attack via a crafted HTTP request. NOTE: this is disputed by the vendor...

6.4AI score0.00603EPSS
SaveExploits0References2
Rows per page
Query Builder