Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Rails remote code execution using render :inline High Ramda Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2021-42581) Critical RCE in Ivanti Connect Secure and Policy Secure (CVE-2024-21887) Critical RCE in SQL Server Reporting Services (SSRS) High RCE with Spring Data Commons High Reachable SharePoint interface High React Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6341) Medium Redis Unauthorized Access Vulnerability Medium Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface High Rejetto HTTP File Server SSTI RCE (CVE-2024-23692) Critical Remote Code Execution (RCE) in Spring Security OAuth High Remote Code Execution (Spring4Shell) Critical Remote code execution in bootstrap-sass 3.2.0.3 High Remote code execution of user-provided local names in Rails High Remote code execution vulnerability in WordPress Duplicator High Remote File Inclusion Critical Remote File Inclusion (admin/lang.php) (CMS Made Simple) High Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) High Request Smuggling High Resin Application Server Improper Input Validation Vulnerability (CVE-2012-2965) High Resin Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2012-2968) Medium Resin Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-44138) High Resin Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2462) Medium Resin Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2032) Medium Resin Application Server Other Vulnerability (CVE-2004-0281) Medium Resin Application Server Other Vulnerability (CVE-2012-2966) High Resin Application Server Other Vulnerability (CVE-2012-2967) High Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2969) Medium Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2966) Medium Resource Accessible Without Required Authentication Medium Restlet Framework Deserialization of Untrusted Data Vulnerability (CVE-2013-4271) High Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14868) High Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14949) High Restlet Framework XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2013-4221) High RethinkDB administrative interface publicly exposed High Retired hash function in SAML Response Informational reveal.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8127) Medium reveal.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-0776) Medium Reverse proxy bypass Medium Reverse Proxy Detected Informational Reverse proxy misrouting High Reverse proxy misrouting through HTTP/2 pseudo-headers (SSRF) Medium ReviveAdserver 7PK - Security Features Vulnerability (CVE-2016-9470) Critical ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-5954) Medium ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9407) Medium ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7364) Medium ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7366) Medium ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9127) High ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9455) High ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9456) High ReviveAdserver Deserialization of Untrusted Data Vulnerability (CVE-2017-5830) Critical ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7368) Low ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9129) Medium ReviveAdserver Improper Access Control Vulnerability (CVE-2015-7367) High ReviveAdserver Improper Access Control Vulnerability (CVE-2015-7369) High ReviveAdserver Improper Authentication Vulnerability (CVE-2016-9124) Critical ReviveAdserver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-7372) High ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8793) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7365) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7370) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7373) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9126) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9128) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9130) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9454) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9457) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9472) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5832) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5833) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8115) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22871) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22872) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22874) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22875) Medium ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-22888) Medium 1...156157158159...306 157 / 306
