Web Browser XSS Protection Not Enabled

Home/Alerts/Alert detail/

Summary: Web Browser XSS Protection is not enabled, or is disabled by the configuration of the ‘X-XSS-Protection’ HTTP response header on the web serverNo longer widely supported by browsers.

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Recorded Future CEO applauds "undesirable" designation by Russia

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Five lesser known Task Manager features in Windows 11

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Common Alerts

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-914 Improper Control of Dynamically-Identified Variables

CWE-318 Cleartext Storage of Sensitive Information in Executable

CWE-1342 Information Exposure through Microarchitectural State after Transient Execution

CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session

CWE-478 Missing Default Case in Multiple Condition Expression

CWE-174 Double Decoding of the Same Data

CWE-1332 Improper Handling of Faults that Lead to Instruction Skips

CWE-34 Path Traversal: '....//'

Free security scan for your website

Don't show website scan report rating on the leaderboard