Lucene search
K

3790 matches found

RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.5 views

CVE-2026-24839

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

6.1CVSS5.9AI score0.00061EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2026/01/28 3:4 p.m.2 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/28 8:32 a.m.1 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/28 4:22 a.m.1 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/28 4:8 a.m.1 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
NVD
NVD
added 2026/01/28 1:16 a.m.3 views

CVE-2026-24839

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

6.1CVSS0.00061EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/28 12:1 a.m.25 views

CVE-2026-24839 Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS0.00061EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/28 12:1 a.m.4 views

CVE-2026-24839

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS5.9AI score0.00061EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/01/28 12:1 a.m.2 views

EUVD-2026-4903

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS5.9AI score0.00061EPSS
Exploits1References3
CVE
CVE
added 2026/01/28 12:1 a.m.13 views

CVE-2026-24839

CVE-2026-24839 affects Dokploy (PaaS). In versions prior to 0.26.6, the Dokploy web interface is vulnerable to clickjacking due to missing frame-busting headers, allowing an attacker to embed Dokploy pages in malicious iframes and trick authenticated users into performing unintended actions. Vers...

6.1CVSS5.9AI score0.00061EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 12:1 a.m.3 views

CVE-2026-24839 Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS5.9AI score0.00061EPSS
Exploits1References3
OSV
OSV
added 2026/01/28 12:1 a.m.3 views

CVE-2026-24839 Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS5.9AI score0.00061EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.3 views

Dokploy security vulnerabilities

Dokploy is an open-source software developed by Dokploy itself. Versions of Dokploy prior to 0.26.6 contained security vulnerabilities; these vulnerabilities were due to the lack of a framework disruption header, which could lead to clickjacking attacks...

6.1CVSS5.8AI score0.00061EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.7 views

PT-2026-5044

Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into...

4.7CVSS5.9AI score0.00061EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2026/01/27 5:28 p.m.1 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 5:16 p.m.0 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 5:10 p.m.0 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 6:58 a.m.1 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.0001EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.7 views

RHEL 9 : thunderbird (RHSA-2026:1413)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1413 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component...

9.8CVSS6AI score0.00025EPSS
Exploits0References28
Rockylinux
Rockylinux
added 2026/01/22 9:6 a.m.6 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

9.8CVSS5.7AI score0.00025EPSS
Exploits0
Rows per page
Query Builder