Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4481) Medium Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4522) Medium Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2065) Medium Ruby Resource Management Errors Vulnerability (CVE-2008-2664) High Ruby Resource Management Errors Vulnerability (CVE-2008-3443) Medium Ruby Resource Management Errors Vulnerability (CVE-2008-3656) High Ruby Resource Management Errors Vulnerability (CVE-2008-4310) High Ruby Resource Management Errors Vulnerability (CVE-2014-2734) Medium Ruby Resource Management Errors Vulnerability (CVE-2014-6438) High Ruby Uncontrolled Resource Consumption Vulnerability (CVE-2018-8777) High Ruby Use of Externally-Controlled Format String Vulnerability (CVE-2017-0898) Critical Ruby Use of Externally-Controlled Format String Vulnerability (CVE-2018-8778) High Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821) Medium Rukovoditel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-11818) High Rukovoditel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-30224) High Rukovoditel Cross-site Scripting (XSS) Vulnerability (CVE-2019-7541) Medium Rukovoditel Improper Input Validation Vulnerability (CVE-2020-11819) Critical Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7400) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11813) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11822) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18469) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18470) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-21732) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35984) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35985) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35986) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35987) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43164) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43165) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43166) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43167) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43169) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43170) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43185) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44944) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44946) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44947) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44948) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44949) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44950) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44951) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44952) Medium Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45020) High Rukovoditel Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2022-48175) Critical Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-11812) Critical Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-11816) Critical Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-11820) Critical Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13587) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13588) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13589) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13590) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13591) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13592) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43168) Critical Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43288) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-44945) Critical Rukovoditel Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-20166) High Rukovoditel Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11815) Critical Rukovoditel Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11817) Critical Same origin method execution (SOME) Medium Same site scripting Medium SAML Consumer Service External Dereference SSRF Medium SAML Consumer Service XML entity injection (XXE) High SAML Consumer Service XSLT injection High SAML Consumer Service XSS vulnerability High SAML Response without signature High SAML Respose signature exclusion High Sangfor NGAF Authentication Bypass High SAP B2B/B2C CRM Local File Inclusion High SAP BO BIP SSRF (CVE-2020-6308) Medium SAP BO BIP XXE (CVE-2022-28213) High SAP Hybris Deserialization RCE High SAP ICF /sap/public/info sensitive information disclosure Medium SAP ICF URL redirection Vulnerability Medium SAP IGS XXE (CVE-2018-2392, CVE-2018-2393) High 1...161162163164...306 162 / 306
