Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity (Possible) Cross site scripting Informational .htaccess File Detected Informational .NET HTTP Remoting publicly exposed High .NET JSON.NET Deserialization RCE High AbanteCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-50971) High AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20141) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42050) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42051) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-40626) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-40627) Medium AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755) High AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-50801) Medium AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-50802) Medium AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-50972) Critical AbanteCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26521) High Access-Control-Allow-Origin header with wildcard (*) value Informational ACME mini_httpd arbitrary file read High Active Mixed Content over HTTPS Medium ActiveMQ OpenWire RCE (CVE-2023-46604) Critical Adminer 4.6.2 file disclosure vulnerability High Adminer Server Side Request Forgery (SSRF) Medium Adobe Coldfusion 8 multiple linked XSS vulnerabilies High Adobe ColdFusion 9 administrative login bypass High Adobe ColdFusion directory traversal High Adobe ColdFusion RDS Path Traversal (CVE-2026-48282) Critical Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102) Critical Adobe Commerce / Magento "PolyShell" Unauthenticated File Upload (CVE-2025-54263, CVE-2025-54264, CVE-2025-54265, CVE-2025-54266, CVE-2025-54267) Critical Adobe Commerce / Magento "PolyShell" Unauthenticated File Upload to Stored XSS (CVE-2025-54263, CVE-2025-54264, CVE-2025-54265, CVE-2025-54266, CVE-2025-54267) High Adobe Commerce/Magento "SessionReaper" RCE (CVE-2025-54236) Critical Adobe Experience Manager Blind XXE via package upload High Adobe Experience Manager exposed user passwords via querybuilder High Adobe Experience Manager Expression Language injection via cloudsettings High Adobe Experience Manager Information Disclosure via Apache Sling v2.3.6 vulnerability Medium Adobe Experience Manager Misconfiguration High Adobe Experience Manager SSRF via MS token verify servlet High Adobe Experience Manager writable JCR nodes via querybuilder High Adobe Flex 3 DOM-based XSS vulnerability High Agentejo Cockpit CMS resetpassword NoSQLi (CVE-2020-35847) High AjaxControlToolkit directory traversal High AjaxPro.NET Professional Deserialization RCE (CVE-2021-23758) High Akeeba backup access control bypass High Alibaba Nacos Authentication Bypass (CVE-2021-29441) High Amazon S3 public bucket Medium Amazon S3 publicly writable bucket High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-47828) Medium Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51484) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51485) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51487) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51488) Medium Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51489) Medium Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375) High Ampache Improper Access Control Vulnerability (CVE-2021-21399) High Ampache Improper Authentication Vulnerability (CVE-2007-4438) Medium Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929) High Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12386) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32644) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0606) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28852) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28853) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41665) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-47184) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51486) High Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51490) Critical Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385) High Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15153) Critical Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-0771) High Ampache Other Vulnerability (CVE-2006-5668) High Ampache Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-4665) High Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-88059) Medium Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88057) Medium Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88058) Medium Angular : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vuln (CVE-2026-88060) Medium Angular : Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-88056) Medium Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169) Medium Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184) Medium 12345...335 1 / 335
