Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5750) Medium TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751) Medium TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20111) Medium TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20112) Medium TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20115) Medium TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20116) Medium TCExam Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4237) Medium TCExam Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4601) Medium TCExam Missing Authorization Vulnerability (CVE-2023-6554) Medium TCExam Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2021-20113) Medium TCExam Other Vulnerability (CVE-2010-2153) Medium TCPDF arbitrary file read High TeamCity Authentication Bypass (CVE-2023-42793) Critical TeamCity Authentication Bypass (CVE-2024-27198) Critical TeamCity Authentication Bypass (CVE-2024-27199) High Telerik.Web.UI.dll Cryptographic Weakness High Telerik Report Server Authentication Bypass Vulnerability Critical Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935) Critical Telerik Web UI Improper Input Validation Vulnerability (CVE-2017-11357) Critical Telerik Web UI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2217) High Telerik Web UI Inadequate Encryption Strength Vulnerability (CVE-2017-11317) Critical Telerik Web UI Insecure Direct Object Reference High Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248) Critical Telerik Web UI Missing Authorization Vulnerability (CVE-2021-28141) Critical Telerik Web UI RadAsyncUpload Deserialization High Telerik Web UI Unrestricted File Upload (CVE-2014-2217) High Telerik Web UI Unrestricted File Upload (CVE-2017-11317) High Test CGI script leaking environment variables Medium TestRail Information Disclosure (CVE-2021-40875) Medium Text4shell: Apache Commons Text RCE via insecure interpolation Critical The DROWN attack (SSLv2 supported) High The FREAK attack Medium The GHOST Vulnerability High The Heartbleed Bug High The POODLE attack (SSLv3 with CBC cipher suites) Medium ThinkPHP v5.0.22/5.1.29 Remote Code Execution Vulnerability High Three.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-28496) High Tiki Wiki CMS: Arbitrary Code Execution High Tiki Wiki CMS: Arbitrary File Download High Tiki Wiki CMS: Remote Code Execution via Calendar Module High timthumb.php remote code execution High TimThumb WebShot remote code execution High TinyMCE ajax_create_folder remote code execution vulnerability High TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1010091) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12648) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17480) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23066) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23494) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45818) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45819) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-48219) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21908) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21910) Medium TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21911) Medium TLS/SSL (EC)DHE Key Reuse Informational TLS/SSL certificate key size too small Medium TLS/SSL LOGJAM attack Medium TLS/SSL Sweet32 attack Medium TLS/SSL Weak Cipher Suites Medium Tomcat path traversal via reverse proxy mapping High Tomcat status page Low ToolsPack malware plugin High TorchServe Management API publicly exposed High TorchServe Management API SSRF (CVE-2023-43654) Critical Tornado debug mode Medium Tornado Improper Input Validation Vulnerability (CVE-2012-2374) Medium Tornado Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-28476) High Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720) Medium Tornado URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-28370) Medium Tornado weak secret key Medium Total.js Directory Traversal (CVE-2019-8903) High Trac CVE-2009-4405 Vulnerability (CVE-2009-4405) High Trace.axd Detected High TRACE Method enabled Low Trac Incorrect Default Permissions Vulnerability (CVE-2010-5108) High 1...172173174175...306 173 / 306
