Safeguard
Tag

cwe-79

Safeguard articles tagged "cwe-79" — guides, analysis, and best practices for software supply chain and application security.

34 articles

Vulnerability Analysis

CVE-2024-11182: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

CVE-2024-11182 affects MDaemon Email Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-05-19.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-27443: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVE-2024-27443 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-05-19.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-42009: RoundCube Webmail Cross-Site Scripting Vulnerability

CVE-2024-42009 affects Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-06-09.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CVE-2025-27915 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-07.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2021-26829: OpenPLC ScadaBR Cross-site Scripting Vulnerability

CVE-2021-26829 affects OpenPLC ScadaBR and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-11-28.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability

CVE-2025-68461 affects Roundcube Webmail and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-02-20.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

CVE-2025-66376 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-18.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CVE-2025-48700 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-20.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability

CVE-2026-42897 affects Microsoft Microsoft and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-15.

Sep 17, 20263 min read
Vulnerability Guides

Cross-Site Scripting (XSS): A Prevention Guide

XSS lets an attacker run their JavaScript in your users' browsers — stealing sessions, rewriting pages, and pivoting to account takeover. This guide covers the three XSS types and the defenses that actually hold.

Jul 1, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.