Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Arbitrary EL Evaluation in RichFaces High Arbitrary File Creation High Arbitrary File Deletion High Arbitrary file existence disclosure in Action Pack Medium Arbitrary File Read in Next.js High Arbitrary File Read on Nuxt.js Development Server Low Arbitrary local file read via file upload High Argo CD Information Disclosure (CVE-2024-37152) Medium Argument Injection High Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-1000206) High Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10321) Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10324) Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-23163) High Artifactory CVE-2019-9733 Vulnerability (CVE-2019-9733) Critical Artifactory CVE-2020-7931 Vulnerability (CVE-2020-7931) High Artifactory CVE-2023-42508 Vulnerability (CVE-2023-42508) Medium Artifactory CVE-2023-42661 Vulnerability (CVE-2023-42661) High Artifactory CVE-2024-3505 Vulnerability (CVE-2024-3505) Medium Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2022-0573) High Artifactory Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-46687) Medium Artifactory Improper Authentication Vulnerability (CVE-2023-42662) Medium Artifactory Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-42509) High Artifactory Improper Input Validation Vulnerability (CVE-2016-6501) Critical Artifactory Improper Input Validation Vulnerability (CVE-2019-19937) High Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000623) High Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45721) Medium Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2247) Medium Artifactory Improper Privilege Management Vulnerability (CVE-2022-0668) Critical Artifactory Incorrect Authorization Vulnerability (CVE-2021-45074) Medium Artifactory Incorrect Authorization Vulnerability (CVE-2021-45730) Medium Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270) Low Artifactory Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-41834) Medium Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424) High Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164) Medium Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2165) High Artifactory Insufficient Verification of Data Authenticity Vulnerability (CVE-2018-19971) Critical Artifactory Missing Authorization Vulnerability (CVE-2019-10322) Medium Artifactory Missing Authorization Vulnerability (CVE-2019-10323) Medium Artifactory Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10036) Critical Artifactory Weak Password Requirements Vulnerability (CVE-2019-17444) Critical ASP.NET: Failure To Require SSL For Authentication Cookies Medium ASP.NET application-level tracing enabled Medium ASP.NET ASPX debugging enabled Medium ASP.NET connection strings stored in plaintext High ASP.NET cookieless authentication enabled Medium ASP.NET Cookieless session state enabled Medium ASP.NET cookies accessible from client-side scripts Medium ASP.NET Core Development Mode enabled Medium ASP.NET CustomErrors Is Disabled Medium ASP.NET debugging enabled Low ASP.NET Deny missing from authorization rule on location Medium ASP.NET diagnostic page Medium ASP.NET error message Low ASP.NET event validation disabled Medium ASP.NET expired session IDs are not regenerated Medium ASP.NET forms authentication using inadequate protection Medium ASP.NET header checking is disabled in web.config Medium ASP.NET login credentials stored in plain text Medium ASP.NET MVC Improper Authentication Vulnerability (CVE-2018-8171) High ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0247) High ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0249) High ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0256) Medium ASP.NET MVC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4075) Medium ASP.NET path disclosure Low ASP.NET potential HTTP Verb Tampering Medium ASP.NET SignalR Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5042) Medium ASP.NET ValidateRequest Is Globally Disabled Medium ASP.NET viewstate encryption disabled Medium ASP.NET ViewStateUserKey Is Not Set Low ASP.NET WCF metadata enabled for behavior Medium ASP.NET WCF replay attacks are not detected Medium ASP.NET WCF service include exception details Medium Atlassian Confluence Access Restriction Bypass Medium Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342) Medium Atlassian Confluence CVE-2020-29448 Vulnerability (CVE-2020-29448) Medium 1...10111213...306 11 / 306
