9811 matches found
UBUNTU-CVE-2014-1742
Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper...
UBUNTU-CVE-2014-0193
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service memory consumption via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames...
CVE-2013-7234
Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...
Design/Logic Flaw
Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...
CVE-2013-7234
Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...
CVE-2013-7234
CVE-2013-7234 affects Simple Machines Forum (SMF). The vulnerability exists in SMF versions prior to 1.1.19 and prior to 2.0.6, where an improper handling of the page framing allows remote attackers to perform clickjacking via an X-Frame-Options header. The NVD entry lists this as a remote, heade...
PT-2014-3296
Name of the Vulnerable Software and Affected Versions Simple Machines Forum SMF versions prior to 1.1.19 Simple Machines Forum SMF versions 2.x prior to 2.0.6 Description The issue allows remote attackers to conduct clickjacking attacks. This is possible due to the lack of an appropriate...
CVE-2013-7234: Improper Input Validation
Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...
Design/Logic Flaw
Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...
CVE-2012-3918
Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...
PT-2014-2273
Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.31T on Cisco 2900 devices Description The issue allows remote attackers to cause a denial of service, resulting in a serial-interface outage, via certain Frame Relay traffic when a VWIC2-2MFT-T1/E1 card is...
CVE-2012-3918: Undefined Security Weakness
Cisco IOS before 15.31T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service serial-interface outage via certain Frame Relay traffic, aka Bug ID CSCub13317...
Mail.ru: Clicjacking on Login panel
i am able to run on frame which lead to click jacking, Find Details on screen shot...
Respondly: x-frame options-sameorigin warning
As the x-frame options set to same-origin it still may be vulnerable to clickjacking attacks how? by using this code Better explanation: http://www.skeletonscribe.net/2012/06/x-frame-options-sameorigin-warning.html...
Localize: ClickJacking
It allows remote attackers to do some clickjacking which can be used for adding arbitrary tasks . Why? Almost all of your page has missing X-FRAME-OPTIONS header. Websites are at risk of a clickjacking attack when they allow content to be embedded within a frame. An attacker may use this risk to...
OpenJDK: Frame injection in generated HTML (Javadoc, 8012375)
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous...
UBUNTU-CVE-2014-1718
Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/rendererhost/softwareframemanager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...
ESA-2014-020: RSA Adaptive Authentication (On-Premise) Multiple Vulnerabilities
ESA-2014-020.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-020: RSA Adaptive Authentication On-Premise Multiple Vulnerabilities EMC Identifier: ESA-2014-020 CVE Identifier: CVE-2014-0637, CVE-2014-0638 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected...
CVE-2014-0638
Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...
Cross site scripting
Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...