Vulnerabilities (CVE)

Filtered by CWE-1021
Total 286 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-5594 1 Mozilla 1 Firefox 2024-11-21 4.3 MEDIUM 4.3 MEDIUM
Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding
CVE-2013-2682 1 Cisco 2 Linksys E4200, Linksys E4200 Firmware 2024-11-21 4.3 MEDIUM 4.3 MEDIUM
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain sensitive information.
CVE-2013-2675 1 Brother 2 Mfc-9970cdw, Mfc-9970cdw Firmware 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information.
CVE-2024-10454 2024-11-01 N/A 6.1 MEDIUM
Clickjacking vulnerability in Clibo Manager v1.1.9.12 in the '/public/login' directory, a login panel. This vulnerability occurs due to the absence of an X-Frame-Options server-side header. An attacker could overlay a transparent iframe to perform click hijacking on victims.
CVE-2024-8388 2 Google, Mozilla 2 Android, Firefox 2024-10-30 N/A 5.3 MEDIUM
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the user from noticing the visual transition happening behind the prompt. These notifications now use the Android Toast feature. *This bug only affects Firefox on Android. Other operating systems are unaffected.* This vulnerability affects Firefox < 130.
CVE-2024-7518 1 Mozilla 3 Firefox, Firefox Esr, Thunderbird 2024-10-29 N/A 6.5 MEDIUM
Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.