Lucene search
+L

4581 matches found

NVD
NVD
•added 2026/03/02 12:16 p.m.•23 views

CVE-2025-58406

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

5.3CVSS0.00187EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/02 12:16 p.m.•22 views

CVE-2025-58405

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

6.1CVSS0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/02 11:16 a.m.•49 views

CVE-2025-58406 Lack of HTTP Response Headers

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

5.3CVSS0.00187EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/02 11:16 a.m.•51 views

CVE-2025-58406

Technical details about CVE-2025-58406 are not provided in the supplied documents. For CGM CLININET, specifics such as affected versions, root cause, and fixes are not disclosed here; monitor for updates.

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/03/02 11:16 a.m.•14 views

CVE-2025-58406

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

8.8CVSS5.9AI score0.00195EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/02 11:16 a.m.•15 views

CVE-2025-58406 Lack of HTTP Response Headers

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/02 11:16 a.m.•30 views

EUVD-2025-208152

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

8.8CVSS5.9AI score0.00195EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/02 11:16 a.m.•50 views

CVE-2025-58405

The CVE-2025-58405 entry concerns the CGM CLININET application, where the component does not implement any mechanisms to prevent clickjacking. The Red Hat RH CVEs likewise describe the same issue. Technical details indicate a lack of HTTP security headers or frame-busting protections, enabling em...

6.1CVSS5.9AI score0.00175EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/03/02 11:16 a.m.•19 views

EUVD-2025-208151

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

8.8CVSS5.9AI score0.00195EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/02 11:16 a.m.•13 views

CVE-2025-58405

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

8.8CVSS5.9AI score0.00195EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/02 11:16 a.m.•14 views

CVE-2025-58405 Lack of protection mechanisms against Clickjacking attacks

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

5.3CVSS5.9AI score0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/02 11:16 a.m.•37 views

CVE-2025-58405 Lack of protection mechanisms against Clickjacking attacks

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

5.3CVSS0.00175EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•21 views

PT-2026-22578

Name of the Vulnerable Software and Affected Versions CGM CLININET affected versions not specified Description The CGM CLININET application lacks defenses against clickjacking attacks. Specifically, it does not utilize HTTP security headers or HTML-based frame-busting protections. This allows an...

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•8 views

CVE-2025-58406: Protection Mechanism Failure

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•7 views

CVE-2025-58405: Improper Restriction of Rendered UI Layers or Frames

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•20 views

CGM CLININET 安全漏洞

CGM CLININET is a hospital information management system developed by the German company CGM. CGM CLININET has a security vulnerability, which stems from the absence of necessary security HTTP headers in responses. This vulnerability may lead to client-side attacks such as clickjacking, MIME...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•21 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from clickjacking or overlay attacks, potentially leading to local privilege escalation...

8.6CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•22 views

PT-2026-22579

Name of the Vulnerable Software and Affected Versions CGM CLININET affected versions not specified Description The CGM CLININET application is missing essential security HTTP headers, which can expose users to various client-side attacks. These attacks include clickjacking, MIME sniffing, unsafe...

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•20 views

CGM CLININET 安全漏洞

CGM CLININET is a hospital information management system developed by the German company CGM. CGM CLININET has a security vulnerability, which stems from the lack of mechanisms to prevent clickjacking attacks. This vulnerability could allow attackers to embed malicious IFRAMES into the applicatio...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/24 10:42 p.m.•23 views

CVE-2026-27511

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55multi contains a clickjacking vulnerability in the web-based administrative interface. The interface does not set the X-Frame-Options header, allowing attacker-controlled sites to embed administrative pages in an iframe and trick an...

5.1CVSS5.4AI score0.00325EPSS
SaveExploits1References1
Rows per page
Query Builder