https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:35:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-06951 cnvd-2021-06951 https://cve.radiocsirt.org/vuln/cnvd-2021-06951 https://cve.radiocsirt.org/vuln/euvd-2026-36695 EUVD-2026-36695 https://cve.radiocsirt.org/vuln/euvd-2026-36695 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5679 <p>Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.</p> <p>Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5679 https://cve.radiocsirt.org/vuln/ghsa-rwh8-h525-4jvj <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.</p> <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.</p> https://cve.radiocsirt.org/vuln/ghsa-rwh8-h525-4jvj https://cve.radiocsirt.org/vuln/gsd-2020-5679 gsd-2020-5679 https://cve.radiocsirt.org/vuln/gsd-2020-5679 https://cve.radiocsirt.org/vuln/jvndb-2020-000080 <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Clickjacking attacks (CWE-1021) - CVE-2020-5679 * Improper input validation (CWE-20) - CVE-2020-5680 EC-CUBE CO.,LTD. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning Partnership.</p> <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Clickjacking attacks (CWE-1021) - CVE-2020-5679 * Improper input validation (CWE-20) - CVE-2020-5680 EC-CUBE CO.,LTD. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2020-000080