Vulnerable JS Library

Home/Alerts/Alert detail/

Risk:
Medium

Type:
Passive

CWE:
CWE-829

Summary: The identified library ExampleLibrary, version x.y.z is vulnerable.

Solution: Please upgrade to the latest version of ExampleLibrary.

Top Security News

PoC exploit for critical WhatsUp Gold RCE vulnerability released (CVE-2024-8785)

Microsoft fixes exploited zero-day (CVE-2024-49138)

QR codes bypass browser isolation for malicious C2 communication

Facebook, Instagram, WhatsApp hit by massive worldwide outage

Chinese hackers use Visual Studio Code tunnels for remote access

Citrix shares mitigations for ongoing Netscaler password spray attacks

Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)

Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

InformationalModern Web Application

MediumDirectory Browsing

LowCookie without SameSite Attribute

InformationalRe-examine Cache-control Directives

InformationalNon-Storable Content

LowX-Debug-Token Information Leak

Top CVE List

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Common CWEs

CWE-912 Hidden Functionality

CWE-1241 Use of Predictable Algorithm in Random Number Generator

CWE-1271 Uninitialized Value on Reset for Registers Holding Security Settings

CWE-1293 Missing Source Correlation of Multiple Independent Data

CWE-656 Reliance on Security Through Obscurity

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-351 Insufficient Type Distinction

MediumCWE-492 Use of Inner Class Containing Sensitive Data

CWE-313 Cleartext Storage in a File or on Disk

HighCWE-643 Improper Neutralization of Data within XPath Expressions ('XPath Injection')

Free security scan for your website

Don't show website scan report rating on the leaderboard