155 matches found
CVE-2021-3799: Improper Restriction of Rendered UI Layers or Frames
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2018-19957: Improper Restriction of Rendered UI Layers or Frames
A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...
CVE-2021-3734
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
Input validation
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734: Improper Restriction of Rendered UI Layers or Frames
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
PT-2021-21612
Name of the Vulnerable Software and Affected Versions yourls affected versions not specified Description The issue is related to Improper Restriction of Rendered UI Layers or Frames. No information is provided about the estimated number of potentially affected devices worldwide or real-world...
CVE-2021-3731: Improper Restriction of Rendered UI Layers or Frames
LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions...
CVE-2021-23976: Improper Restriction of Rendered UI Layers or Frames
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...
CVE-2020-16032: Improper Restriction of Rendered UI Layers or Frames
Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-28218
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 firmware 2.7 and older, that would allow an attacker to trick a user into initiating an unintended action...
CVE-2020-28218: Improper Restriction of Rendered UI Layers or Frames
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 firmware 2.7 and older, that would allow an attacker to trick a user into initiating an unintended action...
CVE-2020-26953: Improper Restriction of Rendered UI Layers or Frames
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...
CVE-2020-4727: Improper Restriction of Rendered UI Layers or Frames
IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...
CVE-2020-13119: Improper Restriction of Rendered UI Layers or Frames
ismartgate PRO 1.5.9 is vulnerable to clickjacking...
CVE-2020-6547: Improper Restriction of Rendered UI Layers or Frames
Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page...
CVE-2020-4644: Improper Restriction of Rendered UI Layers or Frames
IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further...
CVE-2020-4195: Improper Restriction of Rendered UI Layers or Frames
IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further...
CVE-2020-6827: Improper Restriction of Rendered UI Layers or Frames
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...