4594 matches found
PT-2014-7047
Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 6.0.0.3 IF14, update to version 6.0.0.3 IF14 or later to resolve...
CVE-2014-6105: Improper Input Validation
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CentOS 5 : samba3x (CESA-2013:1310)
Updated samba3x packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
clickjacking vulnerability of the mining and use-vulnerability and early warning-the black bar safety net
0x00 introduction 1 talking about clickjacking, a lot of people actually don't know what is. Compared toXSS, clickjacking becomes more mysterious, the clouds vulnerability database inside the related vulnerability is also less than 1 0 bar. 2 sleepy Dragon before hair through a clickjacking of...
CVE-2014-4828
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request...
Cross site request forgery (csrf)
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request...
CVE-2014-4828
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request...
CVE-2014-4828
The CVE-2014-4828 issue affects IBM QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2, where remote attackers can perform clickjacking via a crafted HTTP request. Root cause is improper handling of click actions in the web interface, enabling a malicious site to hijack user clicks. Affected products ar...
PT-2014-6146
Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2 Description The issue allows remote attackers to conduct clickjacking attacks via a crafted HTTP request. Recommendations For IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7...
CVE-2014-4828: Improper Input Validation
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request...
CVE-2014-2063
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
Code injection
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-2063
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-2063
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-2063
This CVE affects Jenkins: versions before 1.551 (non-LTS) and before 1.532.2 (LTS) are reported vulnerable. The issue is described as a clickjacking vulnerability with unspecified vectors. The connected sources confirm the affected product/version and the general impact (clickjacking), but do not...
CVE-2014-2063
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
PT-2014-4463
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.551 Jenkins LTS versions prior to 1.532.2 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For Jenkins versions prior to 1.551, update to version 1.551 or later. For...
CVE-2014-2063: Undefined Security Weakness
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-3149 - Reflected Cross-Site Scripting (XSS) in "Invision Power IP.Board"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-3149 =================== "Reflected Cross-Site Scripting XSS" CWE-79 vulnerability in "Invision Power IP.Board" product Vendor =================== Invision Power Services Inc. Product =================== IP.Board "IP.Board is the leading...
