Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-30151) CVE-2023-30151 CWE-138 CWE-138 High PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-30545) CVE-2023-30545 CWE-138 CWE-138 Medium PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-30839) CVE-2023-30839 CWE-138 CWE-138 High PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-31672) CVE-2023-31672 CWE-138 CWE-138 Critical PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39524) CVE-2023-39524 CWE-138 CWE-138 Critical PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39526) CVE-2023-39526 CWE-138 CWE-138 Critical PrestaShop Improper Privilege Management Vulnerability (CVE-2013-6295) CVE-2013-6295 CWE-269 CWE-269 Critical PrestaShop Improper Privilege Management Vulnerability (CVE-2023-43663) CVE-2023-43663 CWE-269 CWE-269 Medium PrestaShop Improper Privilege Management Vulnerability (CVE-2023-43664) CVE-2023-43664 CWE-269 CWE-269 Medium PrestaShop Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-7491) CVE-2018-7491 CWE-1021 CWE-1021 High PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279) CVE-2020-5279 CWE-863 CWE-863 Medium PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5287) CVE-2020-5287 CWE-863 CWE-863 Medium PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5288) CVE-2020-5288 CWE-863 CWE-863 Medium PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5293) CVE-2020-5293 CWE-863 CWE-863 Medium PrestaShop Other Vulnerability (CVE-2020-15082) CVE-2020-15082 High PrestaShop Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-41651) CVE-2024-41651 CWE-918 CWE-918 High PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2013-6358) CVE-2013-6358 CWE-434 CWE-434 High PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-19126) CVE-2018-19126 CWE-434 CWE-434 Critical PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-19355) CVE-2018-19355 CWE-434 CWE-434 Critical PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19594) CVE-2019-19594 CWE-434 CWE-434 Critical PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19595) CVE-2019-19595 CWE-434 CWE-434 Critical PrestaShop URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-5270) CVE-2020-5270 CWE-601 CWE-601 Medium PrimeFaces 5.x Expression Language injection CVE-2017-1000486 High Programming Error Messages CWE-209 CWE-209 Low Progress Kemp LoadMaster RCE (CVE-2024-1212) CVE-2024-1212 CWE-78 CWE-78 Critical Progress MOVEit Transfer SQL Injection CVE-2023-34362 CWE-89 CWE-89 High ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2017-20101) CVE-2017-20101 CWE-639 CWE-639 Medium ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-7658) CVE-2024-7658 CWE-639 CWE-639 Medium ProjectSend Improper Input Validation Vulnerability (CVE-2017-9741) CVE-2017-9741 CWE-20 CWE-20 Critical ProjectSend Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-40886) CVE-2021-40886 CWE-22 CWE-22 Medium ProjectSend Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-40887) CVE-2021-40887 CWE-22 CWE-22 Critical ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2018-7201) CVE-2018-7201 CWE-1236 CWE-1236 High ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9783) CVE-2017-9783 CWE-707 CWE-707 Medium ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9786) CVE-2017-9786 CWE-707 CWE-707 Medium ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-7202) CVE-2018-7202 CWE-707 CWE-707 Medium ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11533) CVE-2019-11533 CWE-707 CWE-707 Medium ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-40888) CVE-2021-40888 CWE-707 CWE-707 Medium ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0607) CVE-2023-0607 CWE-707 CWE-707 Medium ProjectSend Improper Privilege Management Vulnerability (CVE-2020-28874) CVE-2020-28874 CWE-269 CWE-269 High ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884) CVE-2021-40884 CWE-863 CWE-863 High ProjectSend Incorrect Authorization Vulnerability (CVE-2024-11680) CVE-2024-11680 CWE-863 CWE-863 Critical ProjectSend Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-11492) CVE-2019-11492 CWE-532 CWE-532 High ProjectSend Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11378) CVE-2019-11378 CWE-434 CWE-434 High ProjectSend Use of Insufficiently Random Values Vulnerability (CVE-2024-7659) CVE-2024-7659 CWE-330 CWE-330 High Prototype CVE-2008-7220 Vulnerability (CVE-2008-7220) CVE-2008-7220 High Prototype CVE-2020-27511 Vulnerability (CVE-2020-27511) CVE-2020-27511 High Prototype Improper Privilege Management Vulnerability (CVE-2020-7993) CVE-2020-7993 CWE-269 CWE-269 Medium Prototype pollution High Pulse Secure SSL VPN Arbitrary File reading (CVE-2019-11510) CVE-2019-11510 CWE-22 CWE-22 High Pyramid debug mode CWE-489 CWE-489 Medium Pyramid DebugToolbar enabled CWE-200 CWE-200 Medium Pyramid framework weak secret key CWE-693 CWE-693 Medium Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2004-0150) CVE-2004-0150 CWE-120 CWE-120 High Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-1887) CVE-2008-1887 CWE-120 CWE-120 Critical Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-3142) CVE-2008-3142 CWE-120 CWE-120 High Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2010-1450) CVE-2010-1450 CWE-120 CWE-120 High Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2021-3177) CVE-2021-3177 CWE-120 CWE-120 Critical Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3493) CVE-2010-3493 CWE-362 CWE-362 Medium Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-2667) CVE-2014-2667 CWE-362 CWE-362 Low Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-48566) CVE-2022-48566 CWE-362 CWE-362 High Python Credentials Management Errors Vulnerability (CVE-2019-10160) CVE-2019-10160 Critical Python Cryptographic Issues Vulnerability (CVE-2012-1150) CVE-2012-1150 Medium Python Cryptographic Issues Vulnerability (CVE-2013-7040) CVE-2013-7040 Medium Python CVE-2013-1753 Vulnerability (CVE-2013-1753) CVE-2013-1753 High Python CVE-2018-1060 Vulnerability (CVE-2018-1060) CVE-2018-1060 High Python CVE-2018-1061 Vulnerability (CVE-2018-1061) CVE-2018-1061 High Python CVE-2019-9636 Vulnerability (CVE-2019-9636) CVE-2019-9636 Critical Python CVE-2019-16056 Vulnerability (CVE-2019-16056) CVE-2019-16056 High Python CVE-2019-17514 Vulnerability (CVE-2019-17514) CVE-2019-17514 High Python CVE-2020-27619 Vulnerability (CVE-2020-27619) CVE-2020-27619 Critical Python CVE-2022-42919 Vulnerability (CVE-2022-42919) CVE-2022-42919 High Python CVE-2023-6507 Vulnerability (CVE-2023-6507) CVE-2023-6507 Medium Python CVE-2023-40217 Vulnerability (CVE-2023-40217) CVE-2023-40217 Medium Python Data Processing Errors Vulnerability (CVE-2013-7440) CVE-2013-7440 Medium Python Debugger Unauthorized Access Vulnerability CWE-200 CWE-200 High 1...154155156157...307 155 / 307
