Lucene search
+L

4586 matches found

NVD
NVD
•added 2024/06/14 3:15 p.m.•30 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

8.1CVSS0.00442EPSS
SaveExploits1References2
OSV
OSV
•added 2024/06/14 2:00 p.m.•43 views

RLSA-2024:2888 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fixes: firefox: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 firefox: IndexedDB files retained in private browsing mode CVE-2024-4767 firefox: Potential...

8.8CVSS6.9AI score0.7066EPSS
SaveExploits22References7
Rockylinux
Rockylinux
•added 2024/06/14 1:59 p.m.•32 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

8.8CVSS6.9AI score0.7066EPSS
SaveExploits22
Rockylinux
Rockylinux
•added 2024/06/14 1:59 p.m.•32 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. This updat...

8.8CVSS6.9AI score0.7066EPSS
SaveExploits22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•8 views

CVE-2024-33377: Improper Restriction of Rendered UI Layers or Frames

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

8.1CVSS5.9AI score0.00442EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/14 12:00 a.m.•40 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

0.00442EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/06/14 12:00 a.m.•14 views

LB-LINK BL-W1210M Security Breach

LB-LINK BL-W1210M is a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-W1210M version v2.0, which stems from the presence of a clickjacking vulnerability via the administrator login page...

8.1CVSS6.8AI score0.00442EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/06/14 12:00 a.m.•14 views

PT-2024-25223 · Lb Link · Lb-Link Bl-W1210M

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-W1210M version 2.0 Description: A clickjacking issue was discovered via the Administrator login page. Attackers can cause victim users to perform arbitrary operations by interacting with crafted elements on the web page...

8.1CVSS6.4AI score0.00442EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/06/14 12:00 a.m.•17 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

7.4AI score0.00442EPSS
SaveExploits1References2
CVE
CVE
•added 2024/06/14 12:00 a.m.•64 views

CVE-2024-33377

The LB-LINK BL-W1210M v2.0 wireless router is susceptible to a clickjacking vulnerability located in the Administrator login page . This flaw allows attackers to trick victim users into performing arbitrary operations by interacting with crafted elements on the web page. As a temporary workaround...

8.1CVSS7.4AI score0.00442EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•2 views

PT-2024-4636

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 127 Firefox ESR versions prior to 115.12 Thunderbird versions prior to 115.12 Description: The issue is related to security setting errors in Mozilla browsers, allowing a remote attacker to bypass security restrictio...

6.4CVSS0.00654EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/06/10 7:47 p.m.•17 views

Mozilla: Potential permissions request bypass via clickjacking

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions...

6.1CVSS7.2AI score0.00539EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2024/06/10 7:39 p.m.•16 views

Mozilla: Potential permissions request bypass via clickjacking

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions...

6.1CVSS7.2AI score0.00539EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2024/06/10 7:39 p.m.•41 views

Moderate: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8.8CVSS6.8AI score0.7066EPSS
SaveExploits22References7
Veracode
Veracode
•added 2024/06/10 1:58 p.m.•32 views

Improper Restriction Of Rendered UI Layers Or Frames (Clickjacking)

zenml is vulnerable to Improper Restriction of Rendered UI Layers or Frames Clickjacking. The vulnerability is due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers, allowing an attacker to embed the application UI within an iframe on a...

6.1CVSS6.6AI score0.00357EPSS
SaveExploits1References3Affected Software1
osv-alsa
osv-alsa
•added 2024/06/10 12:00 a.m.•33 views

ALSA-2024:3783 Moderate: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.11.0 ESR. Security Fixes: firefox: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 firefox: IndexedDB files retained in private browsi...

8.8CVSS6.9AI score0.7066EPSS
SaveExploits22References14
osv-alsa
osv-alsa
•added 2024/06/10 12:00 a.m.•37 views

ALSA-2024:3784 Moderate: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fixes: firefox: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 firefox: IndexedDB files retained in private browsing mode CVE-2024-4767 firefox: Potential...

8.8CVSS6.9AI score0.7066EPSS
SaveExploits22References14
osv-ghsa
osv-ghsa
•added 2024/06/06 9:30 p.m.•91 views

GHSA-MQ73-G4QR-FGCQ Clickjacking in zenml

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious...

4.3CVSS5AI score0.00357EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2024/06/06 9:30 p.m.•31 views

Clickjacking in zenml

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious...

6.1CVSS4.4AI score0.00357EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2024/06/06 7:15 p.m.•34 views

CVE-2024-2383

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers. This vulnerability allows an attacker to embed the application UI within an iframe on a malicious...

6.1CVSS0.00357EPSS
SaveExploits1References2
Rows per page
Query Builder