CWE-1021
442 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 442Published CVEs442 of them scored
- 92Last 12 monthspublished in the last year
- 11Critical104 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102236
Visual Studio Code Security Feature Bypass Vulnerability
Microsoft · Visual Studio Code
High8.6 - CVE-2026-18194
IBM App Connect Enterprise is vulnerable to a clickjacking attack
IBM · App Connect Enterprise
Low2.5 - CVE-2026-123529
Vikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-color
go-vikunja · vikunja
Medium5.1 - CVE-2026-123850
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
JetBrains · YouTrack
Low3.5 - CVE-2026-21834
HCL AION is affected by multiple security vulnerabilities.
HCL Software · HCL AION
Low3.1 - CVE-2026-123311
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
JetBrains · IntelliJ IDEA
Medium5.3 - CVE-2026-18159
A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS):…
OpenText · OpenText Directory Services (OTDS)
Medium5.3 - CVE-2026-108536
Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM · Db2 Genius Hub
Medium4.6 - CVE-2026-108049
Clickjacking vulnerability in the Alosuite web application.
AM System · ALO Suite
Medium5.1 - CVE-2026-119715
NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers
nocodb · nocodb
Medium5.3