224 matches found
Input validation
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3799 Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3799: Improper Restriction of Rendered UI Layers or Frames
grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2018-19957: Improper Restriction of Rendered UI Layers or Frames
A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...
GHSA-R6G8-JMJ9-G945 Improper Restriction of Rendered UI Layers or Frames in yourls
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
Input validation
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3734: Improper Restriction of Rendered UI Layers or Frames
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
CVE-2021-3731: Improper Restriction of Rendered UI Layers or Frames
LedgerSMB does not sufficiently guard against being wrapped by other sites, making it vulnerable to 'clickjacking'. This allows an attacker to trick a targetted user to execute unintended actions...
CVE-2021-23976: Improper Restriction of Rendered UI Layers or Frames
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...
CVE-2020-16032: Improper Restriction of Rendered UI Layers or Frames
Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2020-28218
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 firmware 2.7 and older, that would allow an attacker to trick a user into initiating an unintended action...
CVE-2020-28218: Improper Restriction of Rendered UI Layers or Frames
A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 firmware 2.7 and older, that would allow an attacker to trick a user into initiating an unintended action...
CVE-2020-26953: Improper Restriction of Rendered UI Layers or Frames
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...
CVE-2020-5679
Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted...
CVE-2020-5679: Improper Restriction of Rendered UI Layers or Frames
Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted...
CVE-2020-4727: Improper Restriction of Rendered UI Layers or Frames
IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks again...