CWE-1021
Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
401 vulnerabilities with CWE-1021
CVE-2021-27414
MEDIUM
Hitachi ABB Power Grids Ellipse EAM <9.0.25 - CSRF
CVSS 5.5
CVE-2021-46708
MEDIUM
swagger-ui-dist < 4.1.3 - Clickjacking via UI Layer Manipulation
CVSS 6.1
CVE-2021-41657
MEDIUM
SmartBear CodeCollaborator <6.1.6102 - CSRF
CVSS 6.1
CVE-2021-3660
MEDIUM
cockpit-project/cockpit < 254 - Clickjacking via iFrame Rendering
CVSS 4.3
CVE-2021-39038
MEDIUM
IBM WebSphere Application Server <22.0.0.2 - CSRF
CVSS 5.4
CVE-2021-39669
HIGH
Android 11-12 - Tapjacking/Overlay Attack via InstallCaCertificateWarning
CVSS 7.8
CVE-2021-22819
MEDIUM
Schneider Electric EVlink Firmware < 3.4.0.2 - Clickjacking via Web Interface iframe
CVSS 4.3
CVE-2021-1036
HIGH
Android - Local Privilege Escalation via Tapjacking Overlay Attack
CVSS 7.8
CVE-2021-34087
HIGH
Ultimaker S3/S5/3 Firmware - Clickjacking via Local Webserver
CVSS 7.1
CVE-2021-1040
HIGH
Android - Local Privilege Escalation via Tapjacking Overlay Attack
CVSS 7.8
CVE-2021-1039
HIGH
Android - Privilege Escalation via Tapjacking Overlay Attack in NotificationAccessActivity
CVSS 7.8
CVE-2021-1038
MEDIUM
Android - Denial of Service via Tapjacking Overlay Attack
CVSS 5.5
CVE-2021-1016
HIGH
Android - Local Privilege Escalation via Tapjacking Overlay Attack
CVSS 7.3
CVE-2021-1006
MEDIUM
Android 12 - Bluetooth MAC Address Disclosure via DatabaseManager.java Log Information
CVSS 4.4
CVE-2021-0992
LOW
Android 12 - Unauthenticated Local Privilege Escalation via Tapjack Overlay in PaymentDefaultDialog
CVSS 3.3
CVE-2021-0963
HIGH
Android - Local Privilege Escalation via Tapjacking Overlay Attack
CVSS 7.1
CVE-2021-0954
HIGH
Android - Tapjacking/Overlay Attack in ResolverActivity
CVSS 7.3
CVE-2021-39054
MEDIUM
IBM Spectrum Copy Data Management <2.2.13 - CSRF
CVSS 5.4
CVE-2021-40834
MEDIUM
F-Secure SAFE Browser - Info Disclosure
CVSS 4.3
CVE-2021-43546
MEDIUM
Thunderbird <91.4.0-Firefox <95 - Info Disclosure
CVSS 4.3
CVE-2021-38509
MEDIUM
Firefox < 94, Thunderbird < 91.3, Firefox ESR < 91.3 - XSS
CVSS 4.3
CVE-2021-38508
MEDIUM
Firefox <94, Thunderbird <91.3, Firefox ESR <91.3 - CSRF
CVSS 4.3
CVE-2021-38506
MEDIUM
Firefox < 94.0 - UI Spoofing via Fullscreen Mode Navigation
CVSS 4.3
CVE-2021-43048
CRITICAL
TIBCO PartnerExpress < 6.2.1 - Unauthenticated Clickjacking in Interior and Gateway Server Components
CVSS 9.8
CVE-2021-35237
MEDIUM
Kiwi Syslog Server < 9.7.2 - Clickjacking via Missing X-Frame-Options Header
CVSS 5.0
Details
Vulnerabilities
401