CWE-1021
Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
401 vulnerabilities with CWE-1021
CVE-2020-35735
MEDIUM
Vidyo - Clickjacking via Portal URI
CVSS 4.7
CVE-2020-28218
MEDIUM
Easergy T300 Firmware < 2.7 - Clickjacking
CVSS 6.5
CVE-2020-26962
MEDIUM
Firefox < 83.0 - Cross-Origin Iframe Login Form Autofill Spoofing
CVSS 6.1
CVE-2020-26953
MEDIUM
Firefox <83- Thunderbird <78.5 - Info Disclosure
CVSS 4.3
CVE-2020-9993
MEDIUM
Safari < 14.0 - Address Bar Spoofing via Malicious Website
CVSS 4.3
CVE-2020-9987
MEDIUM
Safari < 14.0 - Address Bar Spoofing via Inconsistent UI State
CVSS 4.3
CVE-2020-9945
MEDIUM
macOS Big Sur <11.0.1 and Safari <14.0.1 - Address Bar Spoofing
CVSS 4.3
CVE-2020-9942
MEDIUM
Safari < 13.1.2 and macOS < 11.0.1 - Address Bar Spoofing via UI State Management
CVSS 4.3
CVE-2020-5679
MEDIUM
EC-CUBE 3.0.0-3.0.18 - Clickjacking via UI Layer Restriction Bypass
CVSS 6.1
CVE-2020-4785
MEDIUM
IBM App Connect Enterprise Certified Container <1.0.5 - CSRF
CVSS 5.4
CVE-2020-24711
MEDIUM
gophish < 0.11.0 - Denial of Service via Clickjacking on Account Settings Reset Button
CVSS 6.5
CVE-2020-7371
MEDIUM
Yandex Browser <3.3.9 - Info Disclosure
CVSS 4.3
CVE-2020-15793
MEDIUM
Desigo Insight - Clickjacking via Missing X-Frame-Options Header
CVSS 5.4
CVE-2020-4727
MEDIUM
IBM InfoSphere Information Server 11.7 - CSRF
CVSS 6.1
CVE-2020-13119
HIGH
iSmartGate PRO Firmware 1.5.9 - Clickjacking
CVSS 8.1
CVE-2020-6547
MEDIUM
Google Chrome <84.0.4147.125 - Info Disclosure
CVSS 6.5
CVE-2020-0366
HIGH
Android 11 - Permissions Bypass via Tapjacking in PackageInstaller
CVSS 7.8
CVE-2020-0387
HIGH
Android - Missing Authorization Leading to Tapjacking and Privilege Escalation
CVSS 7.8
CVE-2020-0394
HIGH
Android - Tapjacking via BluetoothPairingDialog Insecure Default
CVSS 7.8
CVE-2020-0386
MEDIUM
Android - Local Privilege Escalation via Tapjacking in RequestPermissionActivity
CVSS 5.5
CVE-2020-7705
HIGH
MIntegralAdSDK <0.0.0 - Code Injection
CVSS 7.1
CVE-2020-4165
MEDIUM
IBM Security Guardium Insights 2.0.1 - CSRF
CVSS 5.4
CVE-2020-13174
MEDIUM
Teradici Management Console <20.04-20.01.1 - CSRF
CVSS 6.1
CVE-2020-15648
MEDIUM
Firefox < 78.0.2 and Thunderbird < 78 - UI Layer Bypass via Object or Embed Tags
CVSS 6.5
CVE-2020-4644
MEDIUM
IBM Planning Analytics Local <2.0.9.1 - CSRF
CVSS 5.4
Details
Vulnerabilities
401