CVE-2020-9444: Improper Restriction of Rendered UI Layers or Frames

Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality...

CVE-2020-9517: Improper Restriction of Rendered UI Layers or Frames

There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks...

CVE-2013-5594: Improper Restriction of Rendered UI Layers or Frames

Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding...

CVE-2020-2105: Improper Restriction of Rendered UI Layers or Frames

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks...

CVE-2019-15930: Improper Restriction of Rendered UI Layers or Frames

Intesync Solismed 3.3sp allows Clickjacking...

CVE-2019-17131: Improper Restriction of Rendered UI Layers or Frames

vBulletin before 5.5.4 allows clickjacking...

CVE-2019-16175: Improper Restriction of Rendered UI Layers or Frames

A clickjacking vulnerability was found in Limesurvey before 3.17.14...

CVE-2019-0305: Improper Restriction of Rendered UI Layers or Frames

Java Server Pages JSPs provided by the SAP NetWeaver Process Integration SAPXIESR and SAPXITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability...

CVE-2019-4217: Improper Restriction of Rendered UI Layers or Frames

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, and 1.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

CVE-2019-5767: Improper Restriction of Rendered UI Layers or Frames

Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK...

CVE-2018-6178: Improper Restriction of Rendered UI Layers or Frames

Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Extension...

CVE-2018-9458: Improper Restriction of Rendered UI Layers or Frames

In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresses due to focus being on the wrong window. This could lead to local escalation of privilege revealing the user's keypresses while the screen was locked with no additional executio...

CVE-2018-12576: Improper Restriction of Rendered UI Layers or Frames

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2017-5026: Improper Restriction of Rendered UI Layers or Frames

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page...

CVE-2008-2716: Improper Restriction of Rendered UI Layers or Frames

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...