CWE-1021: CWE-1021

This vulnerability in NEC WebSAM DeploymentManager allows attackers to reset configurations or restart products via network requests when X-FRAME-OPTI...

Dokploy versions before 0.26.6 are vulnerable to clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy's w...

This vulnerability allows attackers to overlay malicious iFrames on top of legitimate Shopside application interfaces, potentially tricking users into...

This CVE describes a user interface inconsistency vulnerability in Apple iOS and iPadOS that allows an attacker with physical access to a locked devic...

This clickjacking vulnerability in Tenda F3 router's web interface allows malicious websites to embed the admin panel in invisible frames. An authenti...

This CVE describes a clickjacking vulnerability in WeGIA web management software for charitable institutions. Attackers can embed WeGIA pages in malic...

This CVE describes a clickjacking vulnerability where attackers can trick users into performing unintended actions on web interfaces, potentially lead...

PLANKA 2.0.0 lacks X-Frame-Options and CSP frame-ancestors headers, allowing the application to be embedded in malicious iframes. This enables UI redr...

This vulnerability allows attackers to spoof website domains in the Chrome toolbar on Android devices, potentially tricking users into believing they'...

This CVE describes a clickjacking vulnerability in Akinsoft LimonDesk where attackers can overlay malicious iFrames on legitimate pages, tricking user...

This vulnerability allows attackers to manipulate the login page interface layers improperly, potentially enabling UI-based attacks like clickjacking ...

HAX CMS versions 11.0.12 and below (NodeJS) and 11.0.7 and below (PHP) lack X-Frame-Options headers, allowing attackers to embed the CMS login page an...

This vulnerability in RuoYi's Image Source Handler allows attackers to bypass UI layer restrictions, potentially enabling unauthorized interface manip...

This clickjacking vulnerability allows attackers to embed the web application in malicious frames, tricking users into clicking hidden elements. This ...

This clickjacking vulnerability allows attackers to embed the vulnerable web application in an invisible frame and trick users into clicking malicious...

This vulnerability allows attackers who convince users to install malicious Chrome extensions to perform UI spoofing attacks. The malicious extension ...

This vulnerability allows attackers to spoof browser UI elements in Google Chrome on Android, potentially tricking users into interacting with malicio...

This vulnerability in IBM Sterling B2B Integrator allows clickjacking attacks where malicious websites can embed the application's interface in hidden...