CWE-1021
Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
401 vulnerabilities with CWE-1021
CVE-2021-0433
HIGH
Android - Tapjacking/Overlay Attack via Bluetooth Device Pairing Dialog
CVSS 8.0
CVE-2021-1403
HIGH
Cisco IOS XE - Unauthenticated Cross-Site WebSocket Hijacking and Denial of Service via Crafted Link
CVSS 7.4
CVE-2021-23274
CRITICAL
TIBCO API Exchange Gateway < - SSRF
CVSS 9.8
CVE-2021-0386
HIGH
Android 11 - Tapjacking via UsbConfirmActivity
CVSS 7.8
CVE-2021-0391
HIGH
Android - Unauthenticated Account Existence Disclosure via Tapjacking Overlay Attack
CVSS 7.8
CVE-2021-23955
MEDIUM
Firefox < 85.0 - Clickjacking via Pointer Lock State Transfer
CVSS 6.1
CVE-2021-23976
HIGH
Firefox < 86.0 - UI Spoofing and Cross-Origin Attacks via Malicious Intent Manifest
CVSS 8.1
CVE-2021-27375
MEDIUM
Traefik < 2.4.5 - Cross-Origin IFRAME Loading
CVSS 5.3
CVE-2021-0333
HIGH
Android - Tapjacking Permissions Bypass via Bluetooth Permission Dialog Overlay
CVSS 7.3
CVE-2021-0331
HIGH
Android 8.1-11 - Local Privilege Escalation via Notification Access Overlay Attack
CVSS 7.3
CVE-2021-0314
HIGH
Android - Unauthenticated Tapjacking/Overlay Attack via UninstallerActivity
CVSS 7.3
CVE-2021-0305
HIGH
Android 8.1-10 - Tapjacking via Insecure PackageInstaller Default
CVSS 7.8
CVE-2021-0302
HIGH
Android - Tapjacking Attack via Insecure Default Value in PackageInstaller
CVSS 7.8
CVE-2021-21444
MEDIUM
SAP Business Objects BI Platform - XSS
CVSS 6.1
CVE-2021-21139
MEDIUM
Chrome < 88.0.4324.96 - Navigation Restriction Bypass via iframe Sandbox
CVSS 6.5
CVE-2021-21132
CRITICAL
Google Chrome < 88.0.4324.96 - Sandbox Escape via Crafted Chrome Extension
CVSS 9.6
CVE-2021-0315
HIGH
Android 8.0-11 - Tapjacking/Overlay Attack via GrantCredentialsPermissionActivity
CVSS 7.3
CVE-2021-21111
CRITICAL
Google Chrome <87.0.4280.141 - Privilege Escalation
CVSS 9.6
CVE-2020-10743
MEDIUM
OpenShift Container Platform - CSRF
CVSS 4.3
CVE-2020-4547
MEDIUM
IBM Jazz Foundation - Clickjacking via Malicious Web Site
CVSS 5.4
CVE-2020-27059
HIGH
Android 8.0-11 - Tapjacking via Fingerprint Authentication Overlay
CVSS 7.8
CVE-2020-5020
MEDIUM
IBM Spectrum Protect Plus <10.1.6 - CSRF
CVSS 6.1
CVE-2020-16033
MEDIUM
Google Chrome < 87.0.4280.66 - Security UI Spoofing via WebUSB
CVSS 4.3
CVE-2020-16032
MEDIUM
Google Chrome < 87.0.4280.66 - URL Spoofing via Omnibox Manipulation
CVSS 4.3
CVE-2020-16031
MEDIUM
Google Chrome < 87.0.4280.66 - URL Spoofing via Omnibox Manipulation
CVSS 4.3
Details
Vulnerabilities
401