cwe-79
Safeguard articles tagged "cwe-79" — guides, analysis, and best practices for software supply chain and application security.
34 articles
CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVE-2022-42948 affects Fortra Cobalt Strike and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-03-30.
CVE-2022-27926: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2022-27926 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-04-03.
CVE-2020-35730: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVE-2020-35730 affects Roundcube Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-06-22.
CVE-2023-37580: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2023-37580 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-07-27.
CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
CVE-2023-5631 affects Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-10-26.
CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
CVE-2023-43770 affects Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-02-12.
CVE-2024-43573: Microsoft Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43573 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-08.
CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
CVE-2024-37383 affects Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-24.
CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
CVE-2014-2120 affects Cisco Adaptive Security Appliance (ASA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-12.
CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
CVE-2024-44309 affects Apple Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-21.
CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability
CVE-2020-11023 affects JQuery JQuery and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-01-23.
CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVE-2023-34192 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-25.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.