Lucene search
K

5123 matches found

NVD
NVD
added 2018/11/03 4:29 p.m.20 views

CVE-2018-18909

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view...

6.1CVSS6.1AI score0.00865EPSS
Exploits1References1
OSV
OSV
added 2018/11/03 4:29 p.m.17 views

CVE-2018-18909

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view...

6.1CVSS5.9AI score
Exploits0References1
Cvelist
Cvelist
added 2018/11/03 4:0 p.m.17 views

CVE-2018-18909

xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view...

6.1AI score0.00865EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2018/10/30 5:46 p.m.12 views

acom-publicite.fr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-692918 Description| Value ---|--- Affected Website:| acom-publicite.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| hidden until...

0.1AI score
Exploits0
Microsoft KB
Microsoft KB
added 2018/10/09 12:0 a.m.3 views

August 9, 2016 — KB3176492 (OS Build 10240.17071)

August 9, 2016 — KB3176492 OS Build 10240.17071 This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability for Internet Explorer 11 and WebDAV shares. Addressed issue affecting some...

7.1AI score
Exploits0
OSV
OSV
added 2018/10/05 2:29 p.m.5 views

CVE-2018-15423

A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. A...

4.7CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2018/10/05 2:0 p.m.9 views

CVE-2018-15423 Cisco HyperFlex UI Clickjacking Vulnerability

A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. A...

6.9AI score0.00922EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2018/10/01 12:0 a.m.4 views

August 9, 2016 — KB3176493 (OS Build 10586.545)

August 9, 2016 — KB3176493 OS Build 10586.545 This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability by allowing more time for devices to recover from connected standby mode...

7.2AI score
Exploits0
UbuntuCve
UbuntuCve
added 2018/09/28 12:0 a.m.30 views

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

8.1CVSS7.2AI score0.01075EPSS
Exploits0References4
OSV
OSV
added 2018/09/28 12:0 a.m.2 views

UBUNTU-CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

8.1CVSS7.2AI score0.01075EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2018/09/25 7:55 p.m.20 views

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

Certain types of online ads that expand, contract and pop-open aren’t just annoying – they can sometimes be dangerous. The ads in question are called expandable ads, which use what is called iFrame Busters code. The ads, together with iFrame Buster code, are designed to break the limits of a...

6.1AI score
Exploits0References6
Kaspersky
Kaspersky
added 2018/09/12 12:0 a.m.525 views

KLA11323 Multiple vulnerabilities in Apple iTunes

Multiple serious vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, perform cross-site scripting attack, read local files. Below is a complete list of...

8.8CVSS9.6AI score0.10593EPSS
Exploits18References4
Openbugbounty
Openbugbounty
added 2018/08/25 11:0 a.m.11 views

itaporanga.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668990 Description| Value ---|--- Affected Website:| itaporanga.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 11:0 a.m.15 views

saojosedosabugi.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668989 Description| Value ---|--- Affected Website:| saojosedosabugi.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:58 a.m.6 views

quixaba.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668987 Description| Value ---|--- Affected Website:| quixaba.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:58 a.m.8 views

camarasobrado.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668988 Description| Value ---|--- Affected Website:| camarasobrado.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:57 a.m.12 views

emas.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668986 Description| Value ---|--- Affected Website:| emas.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:56 a.m.10 views

juncodoserido.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668985 Description| Value ---|--- Affected Website:| juncodoserido.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:56 a.m.6 views

conceicao.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668984 Description| Value ---|--- Affected Website:| conceicao.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2018/08/25 10:56 a.m.6 views

saojosedobonfim.pb.gov.br IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-668983 Description| Value ---|--- Affected Website:| saojosedobonfim.pb.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

0.1AI score
Exploits0
Rows per page
Query Builder