Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Undertow CVE-2022-2764 Vulnerability (CVE-2022-2764) Medium Undertow CVE-2022-4492 Vulnerability (CVE-2022-4492) Critical Undertow CVE-2023-3223 Vulnerability (CVE-2023-3223) High Undertow Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859) High Undertow Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-1745) Critical Undertow Improper Input Validation Vulnerability (CVE-2020-1757) High Undertow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7816) Medium Undertow Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2018-1067) Medium Undertow Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-10705) High Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7559) Medium Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165) High Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10687) Medium Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-10719) Medium Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-20220) Medium Undertow Incorrect Authorization Vulnerability (CVE-2017-12196) Medium Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-3888) Critical Undertow Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-10212) Critical Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2017-2670) High Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108) High Undertow Missing Authorization Vulnerability (CVE-2019-10184) High Undertow Unchecked Return Value Vulnerability (CVE-2022-1319) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2022-2053) High Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1 Low Unicode Transformation (Best-Fit Mapping) Medium Unprotected Apache NiFi API interface Medium Unprotected JSON file leaking secrets Medium Unprotected Kong Gateway Admin API interface Medium Unprotected phpMyAdmin interface High Unrestricted access to a monitoring system Low Unrestricted access to AnythingLLM API Medium Unrestricted access to Apache HugeGraph Critical Unrestricted access to Caddy API interface High Unrestricted access to Haproxy Data Plane API High Unrestricted access to ImageResizer Diagnotics plugin Low Unrestricted access to Kong Gateway API High Unrestricted access to MLflow Medium Unrestricted access to NGINX+ API interface (read only) Medium Unrestricted access to NGINX+ API interface (read write) High Unrestricted access to NGINX+ Dashboard Medium Unrestricted access to NGINX+ Status module Low Unrestricted access to NGINX+ Upstream HTTP interface Medium Unrestricted access to Odoo DB manager High Unrestricted access to Prometheus Low Unrestricted access to Prometheus Metrics Low Unrestricted File Upload High Unrestricted file upload vulnerability in ofc_upload_image.php High Unsafe use of Reflection High Unsafe value for session tracking in WEB-INF/web.xml Medium Unsupported Hash Detected in Content Security Policy (CSP) Informational Uploadify arbitrary file upload High URL rewrite vulnerability Medium User-controlled form action Medium User controllable charset Medium User controllable script source High User controllable tag parameter Medium uWSGI Path Traversal vulnerability High uWSGI Unauthorized Access Vulnerability High Vanilla Forums Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2018-15833) Medium Vanilla Forums Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000432) High Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528) High Vanilla Forums Deserialization of Untrusted Data Vulnerability (CVE-2018-19499) High Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3613) High Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3812) Medium Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10073) High Vanilla Forums Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-18903) Critical Vanilla Forums Improper Input Validation Vulnerability (CVE-2011-0908) Medium Vanilla Forums Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-9889) Low Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0526) Medium Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0909) Medium Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1009) Medium Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685) Medium 1...176177178179...306 177 / 306
