Web Browser XSS Protection Not Enabled

Home/Alerts/Alert detail/

Summary: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the ‘X-XSS-Protection’ HTTP response header on the web serverNo longer widely supported by browsers.

Top Security News

Download: CIS Critical Security Controls v8.1

Truist Bank confirms breach after stolen data shows up on hacking forum

Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

Hackers now use AppDomain Injection to drop CobaltStrike beacons

CISA proposes new security requirements to protect govt, personal data

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

Top Alert List

Top CVE List

CVE-2024-5910 Palo Alto Expedition Missing Authentication Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability

CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability

CVE-2024-43451 Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

Common CWEs

CWE-114 Process Control

CWE-1291 Public Key Re-Use for Signing both Debug and Production Code

CWE-580 clone() Method Without super.clone()

CWE-235 Improper Handling of Extra Parameters

CWE-662 Improper Synchronization

CWE-543 Use of Singleton Pattern Without Synchronization in a Multithreaded Context

CWE-236 Improper Handling of Undefined Parameters

CWE-1077 Floating Point Comparison with Incorrect Operator

CWE-471 Modification of Assumed-Immutable Data (MAID)

CWE-347 Improper Verification of Cryptographic Signature

Free security scan for your website

Don't show website scan report rating on the leaderboard