CWE-1021
Improper Restriction of Rendered UI Layers or Frames
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
401 vulnerabilities with CWE-1021
CVE-2019-16175
MEDIUM
LimeSurvey < 3.17.14 - Clickjacking
CVSS 4.3
CVE-2019-2125
HIGH
Android 7.0-9 - Privilege Escalation via Overlay Attack in ChangeDefaultDialerDialog
CVSS 7.3
CVE-2019-3639
HIGH
McAfee Web Gateway 7.8.2.0-7.8.2.11 - Clickjacking via Missing X-Frame-Options Header
CVSS 7.1
CVE-2019-4285
MEDIUM
IBM WebSphere Application Server - Liberty Admin Center - CSRF
CVSS 5.4
CVE-2019-3794
MEDIUM
Cloud Foundry UAA < 73.4.0 - Clickjacking via Missing X-FRAME-OPTIONS Header
CVSS 5.4
CVE-2019-9147
MEDIUM
Mailvelope < 3.1.0 - Clickjacking via Settings Page Bypass
CVSS 4.3
CVE-2019-12880
MEDIUM
BCN Quark Quarking Password Manager <3.1.84 - CSRF
CVSS 4.3
CVE-2019-0305
MEDIUM
SAP NetWeaver Process Integration <7.40 - XSS
CVSS 4.3
CVE-2019-5243
MEDIUM
Huawei HG255s Firmware - Clickjacking via Unrestricted UI Layer Rendering
CVSS 4.3
CVE-2019-4217
MEDIUM
IBM Security Information Queue <1.0.3 - CSRF
CVSS 6.1
CVE-2019-7393
MEDIUM
CA Technologies CA Strong Authentication <9.0 - Info Disclosure
CVSS 4.3
CVE-2019-4058
MEDIUM
IBM BigFix <9.2,9.5 - Info Disclosure
CVSS 6.5
CVE-2019-5767
MEDIUM
Google Chrome <72.0.3626.81 - Info Disclosure
CVSS 6.5
CVE-2018-19957
MEDIUM
QNAP QTS < 4.5.4.1715, QuTS hero < h4.5.4.1771, QuTScloud < c4.5.6.1755 Clickjacking
CVSS 6.1
CVE-2018-1853
MEDIUM
IBM Spectrum Protect Backup-Archive Client 7.1.0.0-7.1.8.4 - Clickjacking
CVSS 6.1
CVE-2018-18496
HIGH
Firefox < 64.0 - Clickjacking via RSS Feed Preview Frame
CVSS 8.8
CVE-2018-16172
MEDIUM
Cybozu Remote Service <3.1.8 - CSRF
CVSS 6.5
CVE-2018-6178
MEDIUM
Google Chrome < 68.0.3440.75 - Security UI Spoofing via DevTools Infobar
CVSS 4.3
CVE-2018-17192
MEDIUM
Apache NiFi <1.8.0 - Info Disclosure
CVSS 6.5
CVE-2018-1803
MEDIUM
IBM Security Access Manager Appliance <9.0.5.0 - CSRF
CVSS 6.1
CVE-2018-9524
HIGH
Android 7.0-8.1 - Unauthenticated Local Privilege Escalation via Overlay Window
CVSS 7.8
CVE-2018-9458
HIGH
Android <8.1 - Privilege Escalation
CVSS 7.8
CVE-2018-6909
MEDIUM
Green Electronics RainMachine Mini-8 (2nd Gen) & Touch HD 12 - XSS
CVSS 6.5
CVE-2018-15423
MEDIUM
Cisco HyperFlex HX Data Platform - Unauthenticated Clickjacking via Malicious iFrame Data
CVSS 4.7
CVE-2018-12576
MEDIUM
TP-Link TL-WR841N <v13 - Clickjacking
CVSS 4.3
Details
Vulnerabilities
401