Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,692
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnérabilités associées 8,695

Image ID Titre
CVE-2026-104393 XSS (Cross-Site Scripting) dans Happy Addons for Elementor (CVE-2026-104393)
CVE-2026-104391 XSS (Cross-Site Scripting) dans Quiz And Survey Master (CVE-2026-104391)
CVE-2026-93684 An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put...
CVE-2026-89417 XSS (Cross-Site Scripting) dans WordPress Apache (CVE-2026-89417)
CVE-2025-64392 XSS (Cross-Site Scripting) dans Veeam Backup Enterprise Manager (CVE-2025-64392)
CVE-2026-87971 XSS (Cross-Site Scripting) dans If-So Dynamic Content (WordPress plugin) (CVE-2026-87971)
CVE-2026-105316 XSS (Cross-Site Scripting) dans Magee Shortcodes (WordPress plugin) (CVE-2026-105316)
CVE-2026-104653 XSS (Cross-Site Scripting) dans Envira Gallery (WordPress plugin) (CVE-2026-104653)
CVE-2026-104652 XSS (Cross-Site Scripting) dans Envira Gallery (WordPress plugin) (CVE-2026-104652)
CVE-2026-102173 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-102173)
CVE-2026-14911 XSS (Cross-Site Scripting) dans ASUS (CVE-2026-14911)
CVE-2026-96594 XSS (Cross-Site Scripting) dans Gitea (CVE-2026-96594)
CVE-2026-79816 XSS (Cross-Site Scripting) dans HPE Networking ClearPass Policy Manager (CVE-2026-79816)
CVE-2026-79799 XSS (Cross-Site Scripting) dans ClearPass Policy Manager (CVE-2026-79799)
CVE-2026-105111 XSS (Cross-Site Scripting) dans Apache (CVE-2026-105111)
CVE-2026-103667 XSS (Cross-Site Scripting) dans Gitea (CVE-2026-103667)
CVE-2026-101158 XSS (Cross-Site Scripting) dans Fileserver upload API (CVE-2026-101158)
CVE-2026-101156 A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege...
CVE-2026-101157 A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with...
CVE-2026-106512 The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content...
CVE-2026-106033 XSS (Cross-Site Scripting) dans Ansible Platform UI (CVE-2026-106033)
CVE-2026-104073 XSS (Cross-Site Scripting) dans NetBox (CVE-2026-104073)
CVE-2026-106107 XSS (Cross-Site Scripting) dans @quasar/app-vite (CVE-2026-106107)
CVE-2026-106106 XSS (Cross-Site Scripting) dans @quasar/render-ssr-error (CVE-2026-106106)
CVE-2026-106102 XSS (Cross-Site Scripting) dans quasar (CVE-2026-106102)
CVE-2026-105862 XSS (Cross-Site Scripting) dans payload (CVE-2026-105862)
CVE-2026-105950 XSS (Cross-Site Scripting) dans getformwork formwork (CVE-2026-105950)
CVE-2026-105798 XSS (Cross-Site Scripting) dans SimpleChat (CVE-2026-105798)
CVE-2026-12380 XSS (Cross-Site Scripting) dans E-Commerce Pack (CVE-2026-12380)
CVE-2025-15591 Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server...

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus