Lucene search
+L

4591 matches found

attackerkb
attackerkb
•added 2022/03/10 5:44 p.m.•10 views

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

6.1CVSS6.4AI score0.00784EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/03/10 5:44 p.m.•24 views

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

6.1CVSS5.8AI score0.00784EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/10 5:44 p.m.•23 views

Design/Logic Flaw

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

4.3CVSS6.2AI score0.00784EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2022/03/10 5:42 p.m.•25 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS6.3AI score
SaveExploits0References3
NVD
NVD
•added 2022/03/10 5:42 p.m.•24 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS0.01261EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2022/03/10 5:42 p.m.•4 views

DEBIAN-CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS5.5AI score0.01261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/10 5:42 p.m.•12 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS6AI score0.01261EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2022/03/10 5:42 p.m.•53 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS6.2AI score0.01261EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/10 5:42 p.m.•25 views

Code injection

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS4.5AI score0.01261EPSS
SaveExploits0References3Affected Software2
osv_ubuntu
osv_ubuntu
•added 2022/03/10 5:42 p.m.•25 views

UBUNTU-CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS7.2AI score0.01261EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•16 views

SmartBear CodeCollaborator 输入验证错误漏洞

SmartBear CodeCollaborator is a code review and documentation review tool from SmartBear. It helps development, testing and management teams to work together to produce high-quality code. A security vulnerability exists in SmartBear CodeCollaborator version v6.1.6102, which stems from a problem...

6.1CVSS6.4AI score0.00784EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/10 12:00 a.m.•14 views

CVE-2021-41657: Improper Restriction of Rendered UI Layers or Frames

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

6.1CVSS6.3AI score0.00784EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•8 views

Cockpit 安全漏洞

Cockpit is an interactive server management interface. a security vulnerability exists in Cockpit, which stems from another website within the <iFrame> HTML entry rendering pages from the cockpit server that could be used by malicious websites for clickjacking or similar attacks. No detailed...

4.3CVSS5.5AI score0.01261EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/07 9:06 p.m.•21 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2021-39038)

Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2021-39038 DESCRIPTION: IBM WebSphere Applicati...

5.4CVSS5.5AI score0.00603EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2022/03/07 9:02 p.m.•36 views

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack...

6.5AI score0.00784EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/07 9:02 p.m.•101 views

CVE-2021-41657

SmartBear CodeCollaborator v6.1.6102 contains a web UI vulnerability that enables clickjacking. The affected component is the CodeCollaborator web UI; the underlying issue is an insecure handling of embedded frames that allows an attacker to render a hidden frame and trick an authenticated user i...

6.1CVSS6.2AI score0.00784EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/03/07 1:59 p.m.•244 views

CVE-2021-3660

CVE-2021-3660 relates to Cockpit (and its plugins) not protecting against clickjacking, allowing a cockpit page to be rendered in an on another site. Connected data confirms affected package: cockpit 248-2, with a patched version available. AlmaLinux advisories reference a security fix addressin...

4.3CVSS4.6AI score0.01261EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/03/07 1:59 p.m.•40 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

5AI score0.01261EPSS
SaveExploits0References3
Mend
Mend
•added 2022/03/07 1:59 p.m.•4 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

5.3CVSS0.01261EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2022/03/07 1:59 p.m.•48 views

CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

4.3CVSS4.8AI score0.01261EPSS
SaveExploits0
Rows per page
Query Builder