Lucene search
+L

4591 matches found

NVD
NVD
•added 2021/11/16 6:15 p.m.•32 views

CVE-2021-43048

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability...

10CVSS0.01283EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/16 6:15 p.m.•31 views

Code injection

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability...

10CVSS9.2AI score0.01283EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/11/16 5:50 p.m.•42 views

CVE-2021-43048 TIBCO PartnerExpress Click-Jacking vulnerability

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability...

9.8CVSS9.5AI score0.01283EPSS
SaveExploits0References2
CVE
CVE
•added 2021/11/16 5:50 p.m.•65 views

CVE-2021-43048

The CVE-2021-43048 vulnerability affects TIBCO PartnerExpress Interior Server and Gateway Server components, specifically versions 6.2.1 and earlier. The issue is a click-jacking vulnerability that can be exploited by an unauthenticated attacker with network access and requires no user interactio...

10CVSS9.4AI score0.01283EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/11/16 5:00 p.m.•12 views

CVE-2021-43048

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability...

10CVSS7.3AI score0.01283EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/16 12:00 a.m.•36 views

TIBCO Partnerexpress 安全漏洞

TIBCO Partnerexpress is a Php-based platform that generates barcodes by product name from TIBCO USA. A security vulnerability exists in the internal server and gateway server components of TIBCO PartnerExpress, versions 6.2.1 and below, which can be exploited by an attacker to perform a...

10CVSS8.3AI score0.01283EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•6 views

PT-2021-23736

Name of the Vulnerable Software and Affected Versions TIBCO PartnerExpress versions 6.2.1 and below Description The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with networ...

10CVSS0.01283EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•10 views

CVE-2021-43048: Improper Restriction of Rendered UI Layers or Frames

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability...

10CVSS6AI score0.01283EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2021/11/15 12:01 p.m.•58 views

UPchieve: Clickjacking ar https://hackers.upchieve.org/login

I found clickjacking at login page on https://hackers.upchieve.org that can be exploited if the UI overlay can be performed correctly by the attacker. Clickjack test page Website is vulnerable to clickjacking! Click me when you finish : Impact Its login page so if the UI overlay can be performed...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•27 views

Mozilla Firefox Security Advisory (MFSA2015-35) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS8.1AI score0.0147EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•27 views

Mozilla Firefox Security Advisory (MFSA2015-26) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS9.6AI score0.0208EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•22 views

Mozilla Firefox Security Advisory (MFSA2013-94) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS5.7AI score0.01993EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•21 views

Mozilla Firefox Security Advisory (MFSA2012-54) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4CVSS9.5AI score0.00898EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•24 views

Mozilla Firefox Security Advisory (MFSA2014-50) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS9.6AI score0.02193EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•21 views

Mozilla Firefox Security Advisory (MFSA2013-10) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.8CVSS8AI score0.02189EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•2 views

PT-2021-23784

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2021.1.3 Description The issue concerns the absence of the X-Frame-Options header in certain cases. This header is crucial for preventing clickjacking attacks by specifying whether a page can be iframed or...

9.8CVSS0.01096EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/11/08 12:00 a.m.•55 views

Mozilla Firefox Security Advisory (MFSA2021-03) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2021-03. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

8.8CVSS7.1AI score0.01477EPSS
SaveExploits2References13
OpenVAS
OpenVAS
•added 2021/11/08 12:00 a.m.•30 views

Mozilla Firefox Security Advisory (MFSA2016-58) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

8.8CVSS8.7AI score0.01347EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/29 2:15 p.m.•28 views

CVE-2021-35237

A missing HTTP header X-Frame-Options in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a button or link, to another server...

5CVSS0.0096EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/10/29 2:15 p.m.•20 views

CVE-2021-35237

A missing HTTP header X-Frame-Options in Kiwi Syslog Server has left customers vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a button or link, to another server...

4.3CVSS5.8AI score0.0096EPSS
SaveExploits0References2
Rows per page
Query Builder