CVE-2024-12020

There is a reflected cross-site scripting XSS within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability. Stealing the session cookie is not possible due to cookie security flags, however the...

Mail.ru: Clickjacking Vulnerability via https://profile.my.games/gamecenter/profile/ can lead to sensitive cross site actions (Bypass X-Frame-Options)

Clickjacking attack could allow to force user to change profile settings on profile.my.games...

PT-2020-1921 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft Business Productivity Servers versions affected versions not specified SharePoint Enterprise Server versions affected versions not specified SharePoint Foundation versions affected versions not specified Description: The issue is...