agentprime: CWE-1021

CVE-2026-18159: Clickjacking in OpenText Directory Services (OTDS)

Thu, 05 Nov 2026 19:47:11 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108536: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Wed, 04 Nov 2026 20:59:00 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108049: Clickjacking vulnerability in the Alosuite web application.

Tue, 03 Nov 2026 12:26:07 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119715: NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers

Fri, 30 Oct 2026 15:16:13 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20942: Microsoft Edge (Chromium-based) Spoofing Vulnerability

Thu, 29 Oct 2026 15:21:46 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67079: HCL BigFix AEX is affected by multiple security vulnerabilities.

Wed, 28 Oct 2026 12:25:55 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77062: Clickjacking in boneIO

Mon, 26 Oct 2026 14:46:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

Wed, 21 Oct 2026 17:23:29 GMT

storybook >=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6, fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-113063: Clickjacking in Google Chrome

Tue, 20 Oct 2026 21:02:50 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-60008: Gitea Jupyter notebook UI redress through CSS class injection

Wed, 14 Oct 2026 14:28:31 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109290: Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

Mon, 12 Oct 2026 16:04:51 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108901: Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layer

Mon, 12 Oct 2026 15:45:06 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106400: Clickjacking in Google Chrome

Tue, 06 Oct 2026 18:41:27 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106356: Clickjacking in Google Chrome

Tue, 06 Oct 2026 18:41:24 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-106311: Clickjacking in Google Chrome

Tue, 06 Oct 2026 18:41:23 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71177: Clickjacking in Dell Secure Connect Gateway (SCG) Policy Manager

Wed, 23 Sep 2026 14:02:46 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84388: Clickjacking in Fortinet FortiPAM Chrome Extension

Tue, 22 Sep 2026 14:12:50 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-43688: Clickjacking in Apple iOS and iPadOS and others

Mon, 14 Sep 2026 20:48:01 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86911: Clickjacking in Apple macOS

Mon, 14 Sep 2026 20:48:00 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

Thu, 10 Sep 2026 15:10:20 GMT

open-webui >=0.8.11, <0.11.1, fixed in 0.11.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-87538: Clickjacking in Google Chrome

Wed, 09 Sep 2026 00:10:03 GMT

CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87655: Clickjacking in Google Chrome

Wed, 09 Sep 2026 00:09:50 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87486: Clickjacking in Google Chrome

Wed, 09 Sep 2026 00:09:50 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28656: Clickjacking in Google Android

Tue, 08 Sep 2026 18:05:22 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84139: Clickjacking issue in the DOM: Events component

Tue, 01 Sep 2026 12:19:05 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-75548: Ebyte NA111-M Improper Restriction of Rendered UI Layers or Frames

Thu, 27 Aug 2026 21:30:55 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

Wed, 19 Aug 2026 19:22:59 GMT

geolens <1.2.4, fixed in 1.2.4. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-18534: Address bar spoofing risk in affected iOS versions of Arc Search

Tue, 18 Aug 2026 14:57:22 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74980: Clickjacking issue in the Downloads component in Firefox for Android

Tue, 18 Aug 2026 12:23:40 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74978: Clickjacking issue in the Widget component

Tue, 18 Aug 2026 12:23:39 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74958: Information disclosure in the WebRTC component

Tue, 18 Aug 2026 12:23:37 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-74951: Clickjacking issue in Firefox for Android

Tue, 18 Aug 2026 12:23:36 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44762: Security Misconfiguration in SAP Data Services Management Console

Tue, 11 Aug 2026 00:11:30 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

Wed, 05 Aug 2026 17:27:18 GMT

electron <39.8.10 || >=40.0.0-alpha.1, <41.10.3 || >=42.0.0-alpha.1, <42.0.1, fixed in 39.8.10, 41.10.3, 42.0.1. CVSS 7.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Electron: Cross-origin iframe can position native autofill popup

Wed, 05 Aug 2026 15:40:32 GMT

electron <39.8.8 || >=40.0.0-alpha.1, <40.9.1 || >=41.0.0-alpha.1, <41.2.1 || >=42.0.0-alpha.1, <42.0.0-beta.3, fixed in 39.8.8, 40.9.1, 41.2.1, 42.0.0-beta.3. CVSS 3.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin

Tue, 04 Aug 2026 20:02:03 GMT

open-webui >=0.9.0, <0.11.0, fixed in 0.11.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-60370: Clickjacking in Oracle Corporation Oracle Platform Security for Java

Wed, 22 Jul 2026 22:24:25 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16397: Clickjacking issue in the WebExtensions component in Firefox for Android

Tue, 21 Jul 2026 12:38:10 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40957: Frameable content vulnerability in the Secure Access server login page

Wed, 15 Jul 2026 19:59:05 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58595: Microsoft Bing App for IOS Spoofing Vulnerability

Tue, 14 Jul 2026 17:05:27 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59791: Clickjacking in JetBrains YouTrack

Fri, 10 Jul 2026 14:18:56 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-38979: ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI.

Mon, 06 Jul 2026 00:00:00 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

Thu, 18 Jun 2026 15:04:07 GMT

jupyter-server <2.20.0, fixed in 2.20.0. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-12348: Address Bar Spoofing in Arc Search for Android (window.open race condition)

Tue, 16 Jun 2026 19:54:06 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12323: Spoofing issue in the DOM: Core & HTML component

Tue, 16 Jun 2026 11:52:56 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12322: Clickjacking issue in the Widget: Gtk component

Tue, 16 Jun 2026 11:52:55 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-10733: Improper Restriction of Rendered UI Layers or Frames in GitLab

Thu, 11 Jun 2026 10:19:27 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)

Mon, 08 Jun 2026 23:08:54 GMT

github.com/juev/nebula-mesh <0.3.1, fixed in 0.3.1. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-28577: Clickjacking in Google Android

Mon, 01 Jun 2026 21:14:55 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-0061: Clickjacking in Google Android

Mon, 01 Jun 2026 21:14:53 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.