Vulnerability Name CVE Severity
WebLogic Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-3257)
WebLogic Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2018-11040)
WebLogic Incorrect Authorization Vulnerability (CVE-2018-1258)
WebLogic Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-8908)
WebLogic Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1324)
WebLogic Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-11771)
WebLogic Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-23437)
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3739)
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)
WebLogic Other Vulnerability (CVE-2020-10672)
WebLogic Other Vulnerability (CVE-2020-10673)
WebLogic Other Vulnerability (CVE-2022-24891)
WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)
WebLogic Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-11987)
WebLogic Server Side Request Forgery
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2022-24839)
WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21350)
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-1000180)
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-2351)
WebLogic Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2018-1000613)
Webmail weak password
Webmin v1.920 Unauhenticated Remote Command Execution
WebPageTest Unauthorized Access Vulnerability
WEBrick v.1.3 directory traversal
Web Server Cache Poisoning (CMS Made Simple) v1.x
Web Server Cache Poisoning (CMS Made Simple) v2.x
Web server default welcome page
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-49767)
Werkzeug WSGI CVE-2023-23934 Vulnerability (CVE-2023-23934)
Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-14322)
Werkzeug WSGI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10516)
Werkzeug WSGI Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-29361)
Werkzeug WSGI Insufficient Entropy Vulnerability (CVE-2019-14806)
Werkzeug WSGI Out-of-bounds Write Vulnerability (CVE-2023-46136)
Werkzeug WSGI URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-28724)
Whoops error handler component detected
Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive
Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive
Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0793)
WildFly Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047)
WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993)
WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)
WooCommerce Payments Authentication Bypass and Privilege Escalation
WooFramework shortcode exploit
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
WordPress 'blog.header.php' Multiple SQL Injection Vulnerabilities (0.6.2 - 0.71)
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
WordPress 'comment_post_ID' Parameter SQL Injection Vulnerability (3.0.4)
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'get_edit_post_link()' and 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities (0.6.2 - 2.6)
WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)
WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.5.1)
WordPress 'press-this.php' Remote Security Bypass Vulnerability (0.7 - 3.1.1)
WordPress 'swfupload.swf' Cross-Site Scripting Vulnerability (2.5 - 3.3.1)
WordPress 'templates.php' Cross-Site Scripting Vulnerability (0.6.2 - 2.1)
WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability (0.6.2 - 2.8)
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
WordPress 'wp-db.php' Character Set SQL Injection Vulnerability (2.0 - 2.3.1)
WordPress 'wp-login.php' HTTP Response Splitting Vulnerability (1.2)
WordPress 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
WordPress 'xmlrpc.php' Remote Security Bypass Vulnerability (3.0.1 - 3.0.2)
WordPress 0.7 Posts SQL Injection Vulnerability (0.7)
WordPress 1.5.1.2 Multiple Vulnerabilities (1.0 - 1.5.1.2)
WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
WordPress 2.0.3 Multiple Unspecified Security Vulnerabilities (2.0 - 2.0.3)
WordPress 2.0.4 Multiple Security Vulnerabilities (2.0.4)
WordPress 2.0.5 Charset Decoding SQL Injection Vulnerability (0.6.2 - 2.0.5)
WordPress 2.0.5 Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)