Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,692
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnérabilités associées 8,737

Image ID Titre
CVE-2026-67239 XSS (Cross-Site Scripting) dans RabbitMQ (CVE-2026-67239)
CVE-2026-67237 XSS (Cross-Site Scripting) dans RabbitMQ (CVE-2026-67237)
CVE-2026-18320 Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG...
CVE-2026-18312 Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata...
CVE-2026-18311 XSS (Cross-Site Scripting) dans Readwise Reader for Android (CVE-2026-18311)
CVE-2026-100237 XSS (Cross-Site Scripting) dans Mediawiki - Thanks Extension (CVE-2026-100237)
CVE-2026-97868 XSS (Cross-Site Scripting) dans sheshbabu zen (CVE-2026-97868)
CVE-2026-96874 XSS (Cross-Site Scripting) dans Mediawiki - Cargo extension (CVE-2026-96874)
CVE-2026-85293 XSS (Cross-Site Scripting) dans InvoicePlane (CVE-2026-85293)
CVE-2026-93642 An unauthenticated sender can forge a share notification that triggers stored XSS when a signed...
CVE-2026-93641 An unauthenticated sender can forge a share notification that triggers stored XSS when a signed...
CVE-2026-93647 An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From...
CVE-2026-100176 XSS (Cross-Site Scripting) dans AIL Framework (CVE-2026-100176)
CVE-2026-100190 The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site...
CVE-2026-100174 The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored...
CVE-2026-100172 XSS (Cross-Site Scripting) dans AIL Framework (CVE-2026-100172)
CVE-2026-88420 XSS (Cross-Site Scripting) dans APSL puput (CVE-2026-88420)
CVE-2026-78902 XSS (Cross-Site Scripting) dans Netgate pfSense (CVE-2026-78902)
CVE-2026-27867 XSS (Cross-Site Scripting) dans Regesta Smart HD-PLC - TLDPH16D2 (CVE-2026-27867)
CVE-2026-92106 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco…
CVE-2026-6082 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6082)
CVE-2026-6083 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6083)
CVE-2026-6085 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6085)
CVE-2026-6084 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6084)
CVE-2026-6087 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6087)
CVE-2026-6086 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6086)
CVE-2026-6088 XSS (Cross-Site Scripting) dans StockAgile API (CVE-2026-6088)
CVE-2026-94573 XSS (Cross-Site Scripting) dans Repeater Fields for Elementor Forms (WordPress plugin) (CVE-2026-94573)
CVE-2026-95864 XSS (Cross-Site Scripting) dans Themify Builder (WordPress plugin) (CVE-2026-95864)
CVE-2026-95866 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-95866)

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus