Advisories · Weakness

CWE-1021.

Every Advisory and CVE whose sources give the weakness CWE-1021, newest first.

CVE-2025-1940 CVE record

CVSS 7.1 High

Android Intent confirmation prompt tapjacking using Select options
- Mozilla Firefox
- CWE-1021
Not analysed yet 4 Mar 2025
CVE-2025-24874 CVE record

CVSS 6.8 Medium

Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice
- SAP_SE SAP Commerce (Backoffice)
- CWE-1021
Not analysed yet 11 Feb 2025
CVE-2024-49796 CVE record

CVSS 5.4 Medium

IBM ApplinX Clickjacking
- IBM ApplinX
- CWE-1021
Not analysed yet 5 Feb 2025
CVE-2025-1019 CVE record

CVSS 4.3 Medium

Fullscreen notification not properly displayed
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 4 Feb 2025
CVE-2025-1018 CVE record

CVSS 7.3 High

Fullscreen notification is not displayed when fullscreen is re-requested
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 4 Feb 2025
CVE-2024-6466 CVE record

CVSS 5.3 Medium

Clickjacking in NEC Corporation WebSAM DeploymentManager
- NEC Corporation WebSAM DeploymentManager
- CWE-1021
Not analysed yet 21 Jan 2025
nbgrader PyPI

CVSS 6.9 Medium

nbgrader's `frame-ancestors: self` grants all users access to formgrader
- Information disclosure
- CWE-1021
>=0.9.4, <0.9.5 · fixed in 0.9.5

GHSA-fcr8-4r9f-r66m · CVE-2025-23205 Not analysed yet 17 Jan 2025
CVE-2024-57369 CVE record

CVSS 6.4 Medium

Clickjacking vulnerability in typecho v1.2.1.
- CWE-1021
Not analysed yet 17 Jan 2025
CVE-2024-56436 CVE record

CVSS 5.5 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 8 Jan 2025
CVE-2024-56435 CVE record

CVSS 6.2 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 8 Jan 2025
CVE-2021-29827 CVE record

CVSS 5.2 Medium

IBM InfoSphere Information Server clickjacking
- IBM InfoSphere Information Server
- CWE-1021
Not analysed yet 18 Dec 2024
CVE-2024-55888 CVE record

CVSS 7.1 High

Content Security Policy appears to be missing in software and production setup
- scidsg hushline
- CWE-1021
Not analysed yet 12 Dec 2024
CVE-2024-54112 CVE record

CVSS 5.5 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 12 Dec 2024
CVE-2024-54110 CVE record

CVSS 6.2 Medium

Clickjacking in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-1021
Not analysed yet 12 Dec 2024
CVE-2024-53976 CVE record

CVSS 5.4 Medium

Clickjacking in Mozilla Firefox for iOS
- Mozilla Firefox for iOS
- CWE-1021
Not analysed yet 26 Nov 2024
CVE-2024-11695 CVE record

CVSS 5.4 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 26 Nov 2024
CVE-2024-11700 CVE record

CVSS 8.1 High

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-1021
Not analysed yet 26 Nov 2024
CVE-2024-7404 CVE record

CVSS 6.8 Medium

Improper Restriction of Rendered UI Layers or Frames in GitLab
- GitLab
- CWE-1021
Not analysed yet 14 Nov 2024
CVE-2024-43084 CVE record

CVSS 6.2 Medium

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 13 Nov 2024
CVE-2024-10454 CVE record

CVSS 6.1 Medium

Clickjacking vulnerability in Clibo Manager
- Clibo Manager
- CWE-1021
Not analysed yet 31 Oct 2024
CVE-2024-10004 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Clickjacking in Mozilla Firefox for iOS
- Mozilla Firefox for iOS
- CWE-1021
Not analysed yet 15 Oct 2024
CVE-2024-9397 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 1 Oct 2024
CVE-2024-8388 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 3 Sept 2024
CVE-2024-7523 CVE record

CVSS 6.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 6 Aug 2024
CVE-2024-7518 CVE record

CVSS 6.5 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 6 Aug 2024
CVE-2024-39320 CVE record

CVSS 6.1 Medium

Discourse allows iframe injection though default site setting
- discourse
- Other injection
- CWE-1021
Not analysed yet 30 Jul 2024
CVE-2024-40817 CVE record

CVSS 6.1 Medium

Clickjacking in Apple Safari and others
- Apple Safari
- Apple macOS
- CWE-1021
Not analysed yet 29 Jul 2024
CVE-2023-7013 CVE record

CVSS 5.4 Medium

Clickjacking in Google Chrome
- Google Chrome
- CWE-1021
Not analysed yet 16 Jul 2024
CVE-2024-31324 CVE record

CVSS 7.8 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 9 Jul 2024
CVE-2024-2177 CVE record

CVSS 6.8 Medium

Improper Restriction of Rendered UI Layers or Frames in GitLab
- GitLab
- CWE-1021
Not analysed yet 9 Jul 2024
CVE-2024-30109 CVE record

CVSS 3.7 Low

Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
- HCL Software DRYiCE AEX
- CWE-1021
Not analysed yet 28 Jun 2024
CVE-2023-42011 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator Standard Edition tapjacking
- IBM Sterling B2B Integrator Standard Edition
- CWE-1021
Not analysed yet 27 Jun 2024
CVE-2024-33377 CVE record

CVSS 8.1 High

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.
- CWE-1021
Not analysed yet 14 Jun 2024
zenml PyPI

CVSS 4.3 Medium

A clickjacking vulnerability exists in zenml-io/zenml versions up to and including 0.55.5 due to the application's failure to set appropriate X-Frame-Options or Content-Security-Policy HTTP headers...
- CWE-1021
<0.56.3 · fixed in 0.56.3

GHSA-mq73-g4qr-fgcq · CVE-2024-2383 Not analysed yet 6 Jun 2024
CVE-2023-47774 CVE record

CVSS 5.4 Medium

WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability
- Automattic Jetpack
- CWE-1021
Not analysed yet 24 Apr 2024
CVE-2024-3911 CVE record

CVSS 6.5 Medium

Welotec: Clickjacking Vulnerability in WebUI
- Welotec SMART EMS
- Welotec VPN Security Suite
- CWE-1021
Not analysed yet 23 Apr 2024
CVE-2024-29981 CVE record

CVSS 4.3 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- Microsoft Edge (Chromium-based) Extended Stable
- CWE-1021
Not analysed yet 4 Apr 2024
CVE-2024-2613 CVE record

CVSS 7.5 High

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 19 Mar 2024
CVE-2024-28196 CVE record

CVSS 6.5 Medium

Clickjacking in your_spotify
- Yooooomi your_spotify
- CWE-1021
Not analysed yet 13 Mar 2024
CVE-2024-26167 CVE record

CVSS 4.3 Medium

Microsoft Edge for Android Spoofing Vulnerability
- Microsoft Edge for Android
- CWE-1021
Not analysed yet 7 Mar 2024
CVE-2024-1890 CVE record

CVSS 6.4 Medium

Clickjacking vulnerability in Sunny Webbox
- SMA Sunny Webbox
- CWE-1021
Not analysed yet 26 Feb 2024
CVE-2024-1550 CVE record

CVSS 6.1 Medium

Clickjacking in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-1021
Not analysed yet 20 Feb 2024
CVE-2023-45698 CVE record

CVSS 4.8 Medium

HCL Sametime is impacted by clickjacking
- HCL Software HCL Sametime
- CWE-1021
Not analysed yet 10 Feb 2024
plone PyPI

CVSS 6.3 Medium

Cross-Frame Scripting vulnerability has been found on Plone CMS
- CWE-1021
<6.0.7 · fixed in 6.0.7

GHSA-5xfx-55x4-j223 · CVE-2024-0669 Not analysed yet 18 Jan 2024
CVE-2022-32919 CVE record

CVSS 4.7 Medium

Clickjacking in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- CWE-1021
Not analysed yet 10 Jan 2024
CVE-2023-6093 CVE record

CVSS 5.3 Medium

OnCell G3150A-LTE Series: Clickjacking Vulnerability
- Moxa OnCell G3150A-LTE Series
- CWE-1021
Not analysed yet 31 Dec 2023
CVE-2023-4958 CVE record

CVSS 6.1 Medium

Stackrox: missing http security headers allows for clickjacking in web ui
- Red Hat Advanced Cluster Security 4.2
- Red Hat Advanced Cluster Security 3
- CWE-1021
Not analysed yet 12 Dec 2023
CVE-2023-2265 CVE record

CVSS 4.3 Medium

Improper restriction of rendered UI layers or frames could lead to clickjacking attack
- Schweitzer Engineering Laboratories SEL-411L
- CWE-1021
Not analysed yet 30 Nov 2023
CVE-2023-4956 CVE record

CVSS 6.5 Medium

Quay: clickjacking on config-editor page severity
- Red Hat Quay 3
- CWE-1021
Not analysed yet 7 Nov 2023
CVE-2023-36920 CVE record

CVSS 6.1 Medium

Clickjacking vulnerability in SAP Enable Now
- SAP SE SAP Enable Now
- CWE-1021
Not analysed yet 30 Oct 2023
CVE-2023-41897 CVE record

CVSS 8.8 High

Lack of XFO header allows clickjacking in Home Assistant Core
- home-assistant core
- CWE-1021
Not analysed yet 19 Oct 2023
CVE-2023-5103 CVE record

CVSS 4.3 Medium

Clickjacking in SICK AG APU0200
- SICK AG APU0200
- CWE-1021
Not analysed yet 9 Oct 2023
gugoan/economizzer Packagist

CVSS 6.5 Medium

Economizzer vulnerable to Clickjacking
- CWE-1021
<=0.9-beta1 · no fixed version yet

GHSA-gc95-5mmp-mp6j · CVE-2023-38873 Not analysed yet 28 Sept 2023
CVE-2023-0654 CVE record

CVSS 3.9 Low

Spoofing User's Activity Loads in WARP Mobile Client (Android)
- Cloudflare WARP Client
- CWE-1021
Not analysed yet 29 Aug 2023
CVE-2023-4229 CVE record

CVSS 4.3 Medium

ioLogik 4000 Series: Session Headers Not Implemented
- Moxa ioLogik 4000 Series
- CWE-1021
Not analysed yet 24 Aug 2023
CVE-2023-34658 CVE record

Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.
- CWE-1021
Not analysed yet 29 Jun 2023
CVE-2023-3140 CVE record

CVSS 4.3 Medium

KNIME Hub Web Application is vulnerable to clickjacking
- KNIME Business Hub
- CWE-1021
Not analysed yet 7 Jun 2023
CVE-2023-2013 CVE record

CVSS 2.6 Low

Clickjacking in GitLab
- GitLab
- CWE-1021
Not analysed yet 7 Jun 2023
CVE-2023-28159 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 2 Jun 2023
CVE-2023-25748 CVE record

CVSS 4.3 Medium

Clickjacking in Mozilla Firefox
- Mozilla Firefox
- CWE-1021
Not analysed yet 2 Jun 2023