CVE-2025-59842
Published Sep 26, 2025jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX…
CWE archive
CWE-1022 CVEs
Programmatic archive12 CVEs tagged with CWE-1022 — 0 Critical, 0 High, 9 Medium, 3 Low, 0 Unrated.
CVE-2025-42941
Published Aug 12, 2025SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link (<a>) elements. An attacker with administrat…
CVE-2025-33014
Published Jul 18, 2025IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remo…
CVE-2024-39727
Published Dec 25, 2024IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this v…
CVE-2018-25089
Published Aug 28, 2023A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue affects some unknown processing of the component Link Attribut…
CVE-2022-4927
Published Mar 5, 2023A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/_refworks.h…
CVE-2018-25058
Published Dec 29, 2022A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown part of the file js/twitterFetcher.js of the component Link Ta…
CVE-2020-36624
Published Dec 22, 2022A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/text_helpers/translation.r…
CVE-2022-2600
Published Aug 22, 2022The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to…
CVE-2022-1583
Published May 30, 2022The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable t…
CVE-2021-33697
Published Sep 15, 2021Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious…
CVE-2021-39112
Published Aug 25, 2021Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortc…
Showing 1-12 of 12 CVEsPage 1 of 1