42 matches found
CVE-2026-84388
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...
ROS-20260910-73-0012
The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
ROS-20260910-73-0036
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and compromise its integrity.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...
The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge web browsers allows a hacker to compromise data integrity.
The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure.
Vulnerability of the DOM component: The Core and HTML components of the Firefox web browser and Thunderbird email client are vulnerable due to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to cause service interruption...
Improper Restriction of Rendered UI Layers or Frames
Overview Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in comments. An attacker can cause users to be redirected to a malicious page by injecting CSS that transforms the entire wiki interface into a clickable link area. Remediation Upgrad...
CVE-2025-59479
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product...
CVE-2025-59479
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product...
PT-2025-51368
Name of the Vulnerable Software and Affected Versions CHOCO TEI WATCHER mini IB-MCT001 affected versions not specified Description The CHOCO TEI WATCHER mini IB-MCT001 has a flaw related to insufficient restrictions on how user interface layers and frames are rendered. If a user interacts with...
Shopside App 安全漏洞
Shopside App is a shopping application by Shopside Turkey. A security vulnerability exists in Shopside App 05022025 and earlier versions, which stems from improper restriction of the rendering UI layer or frame, which may result in an iFrame override...
EUVD-2017-7954
Malware in sbrugna...
EUVD-2023-0485
Malicious code in bioql PyPI...
EUVD-2023-33771
Malicious code in bioql PyPI...
EUVD-2022-5245
Malicious code in bioql PyPI...
EUVD-2022-35588
Malicious code in bioql PyPI...
EUVD-2023-57443
Malicious code in bioql PyPI...
CVE-2025-7903
A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The...
CVE-2025-7903 yangzongzhuan RuoYi Image Source ui layer
A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The...
RuoYi 安全漏洞
RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in RuoYi 4.8.1 and earlier versions, which stems from an improper restriction of the rendering UI layer of the Image Source Handler component...