Home/Alerts/Alert detail/

Anti-clickjacking Header

Type:
Passive

Alerts

Missing Anti-clickjacking Header

Multiple X-Frame-Options Header Entries

X-Frame-Options Defined via META (Non-compliant with Spec)

X-Frame-Options Setting Malformed

Top Security News

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Risk, Reputational Scores Enjoy Mixed Success as Security Tools

Windows Server 2025 released—here are the new features

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Microsoft: macOS bug lets hackers install malicious kernel drivers

FBI deletes Chinese PlugX malware from thousands of US computers

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Top Alert List

Content Security Policy (CSP) Header Not Set

CSP

MediumAbsence of Anti-CSRF Tokens

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

InformationalInformation Disclosure - Suspicious Comments

LowCross-Domain JavaScript Source File Inclusion

MediumContent Security Policy (CSP) Header Not Set

InformationalRe-examine Cache-control Directives

LowX-Content-Type-Options Header Missing

Latest CVE List

CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability

CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability

CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability

CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability

Common CWEs

CWE-24 Path Traversal: '../filedir'

HighCWE-294 Authentication Bypass by Capture-replay

CWE-456 Missing Initialization of a Variable

LowCWE-333 Improper Handling of Insufficient Entropy in TRNG

CWE-506 Embedded Malicious Code

CWE-585 Empty Synchronized Block

HighCWE-327 Use of a Broken or Risky Cryptographic Algorithm

LowCWE-774 Allocation of File Descriptors or Handles Without Limits or Throttling

CWE-219 Storage of File with Sensitive Data Under Web Root

CWE-550 Server-generated Error Message Containing Sensitive Information

Free online web security scanner

Don't show website scan report rating on the leaderboard