Improper Restriction of Rendered UI Layers or Frames

Every one of the 402 is a mark on the map. Named now: 1 to 26, most at risk first.

1. unilogies/bumsys < v2.0.2 - ClickjackingCVE-2023-1362unilogies · CVSS 8.4 · 1.4% likely

   Unilogies

2. Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.CVE-2021-21132Google · 25% likely

   Google

3. Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct c…CVE-2011-124415% likely
4. Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain sensitive information.CVE-2013-26826.3% likely
5. Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.CVE-2021-21139Google · 5.1% likely

   Google

6. An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that ena…CVE-2017-11290Adobe Connect 9.6.2 and earlier versions · 3.0% likely
7. Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilita…CVE-2008-27163.0% likely
8. A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then trick…CVE-2005-24072.7% likely
9. The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results inc…CVE-2018-17192Apache Software Foundation · 2.7% likely

   Apache

10. The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers…CVE-2014-14802.7% likely
11. Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjun…CVE-2014-14832.4% likely
12. Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which al…CVE-2013-56142.4% likely
13. A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2…CVE-2019-7393CA Technologies, A Broadcom Company · 2.3% likely

    CA Technologies, A Broadcom Company

14. Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information.CVE-2013-26752.2% likely
15. Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers…CVE-2015-12412.2% likely
16. Clickjacking in the web consoleCVE-2022-28889Apache Software Foundation · 1.9% likely

    Apache

17. REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.CVE-2020-2105Jenkins project · 1.8% likely

    Jenkins

18. Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top an uncontrolled webpa…CVE-2021-38509Mozilla · 1.8% likely

    Mozilla

19. ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or FramesCVE-2022-2179Rockwell Automation · CVSS 6.5 · 1.7% likely

    Rockwell Automation

20. The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious websi…CVE-2022-42799Apple · CVSS 6.1 · 1.7% likely

    Apple

21. By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the promp…CVE-2021-38508Mozilla · 1.6% likely

    Mozilla

22. Improper Restriction of Rendered UI Layers or Frames in polonel/trudeskCVE-2022-1803polonel · CVSS 8.4 · 1.6% likely

    Polonel

23. Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-adminCVE-2021-3799getgrav · CVSS 5.4 · 1.6% likely

    Getgrav

24. The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attackCVE-2020-247111.6% likely
25. A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vul…CVE-2021-377881.5% likely
26. Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI incl…CVE-2021-38506Mozilla · 1.5% likely

    Mozilla

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.