Lucene search
+L

224 matches found

NVD
NVD
•added 2026/09/23 3:17 p.m.•10 views

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS0.00138EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 2:02 p.m.•7 views

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 2:02 p.m.•9 views

CVE-2026-71177

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Session theft . Rem...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/23 2:02 p.m.•42 views

CVE-2026-71177

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS0.00138EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 2:02 p.m.•9 views

EUVD-2026-85328

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•9 views

CVE-2026-71177: Improper Restriction of Rendered UI Layers or Frames

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•1 views

PT-2026-97331

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Improper Restriction of Rendered UI Layers or Frames issue exists where a low privileged attacker with remote access could potentially exploit the flaw ...

5.4CVSS6AI score0.00138EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 2:12 p.m.•104 views

CVE-2026-84388

An improper restriction of rendered UI layers or frames vulnerability in Fortinet FortiPAM Chrome Extension (versions 8.0 and 7.4 , all versions) allows a remote, unauthenticated attacker to achieve information disclosure and compromise the confidentiality and integrity of protected data. Accordi...

9.6CVSS8AI score0.00377EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/09/22 2:12 p.m.•13 views

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

9.6CVSS8AI score0.00377EPSS
SaveExploits1References1
Redos
Redos
•added 2026/09/08 12:00 a.m.•13 views

ROS-20260908-73-0035

The vulnerability in Golang-X-Net is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

6.1CVSS6.4AI score0.00223EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•6 views

CVE-2026-75548: Improper Restriction of Rendered UI Layers or Frames

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

5.4CVSS5.8AI score0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•1 views

CVE-2026-74958: Improper Restriction of Rendered UI Layers or Frames

Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

7.5CVSS6AI score0.00452EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-74978: Improper Restriction of Rendered UI Layers or Frames

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

8.1CVSS6AI score0.00381EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-74951: Improper Restriction of Rendered UI Layers or Frames

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

6.5CVSS5.9AI score0.00275EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•3 views

CVE-2026-18534: Improper Restriction of Rendered UI Layers or Frames

ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk...

7.4CVSS5.7AI score0.00339EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•3 views

CVE-2026-60370: Improper Restriction of Rendered UI Layers or Frames

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

7.5CVSS5.7AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•3 views

CVE-2026-16397: Improper Restriction of Rendered UI Layers or Frames

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153...

6.5CVSS6AI score0.00174EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•22 views

Microsoft Bing App for IOS Spoofing Vulnerability

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

8.1CVSS5.8AI score0.0069EPSS
SaveExploits0
Snyk
Snyk
•added 2026/06/18 3:04 p.m.•17 views

Improper Restriction of Rendered UI Layers or Frames

Overview Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames via the NbconvertFileHandler and NbconvertPostHandler classes when rendering user-authored notebook HTML without a proper sandbox directive in the Content-Security-Policy. An attacker...

9.3CVSS7.8AI score0.00438EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/16 12:00 a.m.•1 views

CVE-2026-12322: Improper Restriction of Rendered UI Layers or Frames

Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

5.4CVSS6.1AI score0.00207EPSS
SaveExploits0References4
Rows per page
Query Builder