Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4848) Medium ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1000307) Medium ClipBucket Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2018-7664) Critical ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849) High ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643) High ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-7666) Critical ClipBucket Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-7665) Critical Clockwork PHP dev tool enabled Medium Cloud metadata publicly exposed High CloudPanel file-manager Auth bypass (CVE-2023-35885) Critical Cmd hijack vulnerability High Code Evaluation (Apache Struts) S2-016 Critical Code Evaluation (Apache Struts) S2-045 Critical Code Evaluation (Apache Struts) S2-046 High Code Evaluation (ASP) Critical Code Evaluation (Perl) Critical Code Evaluation (PHP) Critical Code Evaluation (Python) Critical Code Evaluation (Ruby) Critical Code Execution via WebDav High CodeIgniter 2.1.3 xss_clean() filter bypass High CodeIgniter development mode enabled Medium CodeIgniter session decoding vulnerability High CodeIgniter weak encryption key High ColdFusion 8 FCKEditor file upload vulnerability High ColdFusion 9 solr service exposed High ColdFusion Access Control bypass (CVE-2023-29298/CVE-2023-38205) High ColdFusion administrator login page publicly available Low ColdFusion AMF Deserialization RCE High ColdFusion Arbitrary File Upload High ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360) High ColdFusion directory traversal High ColdFusion FlashGateway Deserialization RCE CVE-2019-7091 High ColdFusion JNDI injection RCE High ColdFusion path disclosures Low ColdFusion PMS Arbitrary File Read (CVE-2024-20767) High ColdFusion RDS Service enabled Low ColdFusion Request Debugging information disclosure Medium ColdFusion Robust Exception enabled Medium ColdFusion User-Agent cross-site scripting High ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204) Critical ColdFusion WDDX Deserialization RCE (CVE-2023-44353) Critical ColdFusion XSS (CVE-2023-44352) Medium Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285) Medium Collabtive Improper Input Validation Vulnerability (CVE-2012-2670) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5284) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3247) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8935) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13655) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3298) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-46240) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-48706) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-48707) Medium Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-48708) Medium Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4269) High Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6872) Medium Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3246) Medium Collabtive Improper Privilege Management Vulnerability (CVE-2013-5027) Critical Collabtive Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2015-0258) High Command Injection Critical Composer installed.json publicly accessible Low concrete5 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8082) Medium concrete5 CVE-2020-14961 Vulnerability (CVE-2020-14961) Medium concrete5 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-5107) Medium concrete5 Improper Input Validation Vulnerability (CVE-2017-18195) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5181) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5108) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9526) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2250) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3989) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-4721) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6905) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6908) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-7725) Medium concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19146) Medium 1...18192021...306 19 / 306
