Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-54264) CVE-2026-54264 CWE-200 CWE-200 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4231) CVE-2021-4231 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61261) CVE-2025-61261 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-66412) CVE-2025-66412 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-22610) CVE-2026-22610 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27970) CVE-2026-27970 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555) CVE-2026-50555 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556) CVE-2026-50556 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557) CVE-2026-50557 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-52725) CVE-2026-52725 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265) CVE-2026-54265 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267) CVE-2026-54267 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149) CVE-2026-69149 CWE-707 CWE-707 Medium Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69151) CVE-2026-69151 CWE-707 CWE-707 Medium Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490) CVE-2024-21490 CWE-1333 CWE-1333 High Angular Insufficient Verification of Data Authenticity Vulnerability (CVE-2026-68945) CVE-2026-68945 CWE-345 CWE-345 Medium AngularJS client-side template injection CWE-79 CWE-79 High AngularJS Improper Input Validation Vulnerability (CVE-2019-10768) CVE-2019-10768 CWE-20 CWE-20 High AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863) CVE-2019-14863 CWE-707 CWE-707 Medium AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7676) CVE-2020-7676 CWE-707 CWE-707 Medium AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-25869) CVE-2022-25869 CWE-707 CWE-707 Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25844) CVE-2022-25844 CWE-1333 CWE-1333 High AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116) CVE-2023-26116 CWE-1333 CWE-1333 Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26117) CVE-2023-26117 CWE-1333 CWE-1333 Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26118) CVE-2023-26118 CWE-1333 CWE-1333 Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490) CVE-2024-21490 CWE-1333 CWE-1333 High AngularJS Other Vulnerability (CVE-2024-8372) CVE-2024-8372 Medium AngularJS Other Vulnerability (CVE-2024-8373) CVE-2024-8373 Medium Angular Origin Validation Error Vulnerability (CVE-2026-50168) CVE-2026-50168 CWE-346 CWE-346 High Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423) CVE-2026-41423 CWE-918 CWE-918 Medium Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417) CVE-2026-46417 CWE-918 CWE-918 Medium Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171) CVE-2026-50171 CWE-400 CWE-400 Medium Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-54268) CVE-2026-54268 CWE-400 CWE-400 High Angular Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-50170) CVE-2026-50170 CWE-524 CWE-524 High Angular Use of Weak Hash Vulnerability (CVE-2026-54266) CVE-2026-54266 Medium An Unsafe Content Security Policy (CSP) Directive in Use CWE-942 CWE-942 Informational Apache ActiveMQ default administrative credentials CWE-1188 CWE-1188 High Apache Airflow default credentials CWE-798 CWE-798 High Apache Airflow Experimental API Auth Bypass CVE-2020-13927 CVE-2020-13927 CWE-200 CWE-200 High Apache Airflow Exposed configuration CWE-200 CWE-200 Medium Apache Airflow Unauthorized Access Vulnerability CWE-200 CWE-200 High Apache APISIX default token (CVE-2020-13945/CVE-2022-24112) CVE-2020-13945 CVE-2022-24112 CWE-259 CWE-259 Medium Apache Axis2 administration console weak password CWE-200 CWE-200 High Apache Axis2 information disclosure CWE-200 CWE-200 Medium Apache Axis2 web services enumeration CWE-200 CWE-200 Low Apache Axis2 xsd local file inclusion CWE-22 CWE-22 High Apache balancer-manager application publicly accessible CWE-200 CWE-200 Medium Apache Cassandra Unauthorized Access Vulnerability CWE-200 CWE-200 Medium Apache configured to run as proxy CWE-441 CWE-441 Medium Apache CouchDB JSON Remote Privilege Escalation Vulnerability CVE-2017-12635 CWE-285 CWE-285 High Apache Denial of service in mod_lua r:parsebody Vulnerability (CVE-2022-29404) CVE-2022-29404 Medium Apache Flink jobmanager/logs Path Traversal CVE-2020-17519 CWE-22 CWE-22 High Apache Geronimo default administrative credentials CWE-1392 CWE-1392 High Apache httpOnly cookie disclosure CVE-2012-0053 CWE-200 CWE-200 Medium Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2005-2970) CVE-2005-2970 CWE-770 CWE-770 Medium Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2008-2364) CVE-2008-2364 CWE-770 CWE-770 Medium Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2011-0419) CVE-2011-0419 CWE-770 CWE-770 Medium Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517) CVE-2019-9517 CWE-770 CWE-770 High Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-30522) CVE-2022-30522 CWE-770 CWE-770 High Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-27316) CVE-2024-27316 CWE-770 CWE-770 High Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-29168) CVE-2026-29168 CWE-770 CWE-770 High Apache HTTP Server Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2025-66200) CVE-2025-66200 CWE-288 CWE-288 Medium Apache HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-11984) CVE-2020-11984 CWE-120 CWE-120 Critical Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-34059) CVE-2026-34059 CWE-126 CWE-126 High Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-44185) CVE-2026-44185 CWE-126 CWE-126 High Apache HTTP Server Buffer Underwrite ('Buffer Underflow') Vulnerability (CVE-2026-44631) CVE-2026-44631 CWE-124 CWE-124 Critical Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2007-1741) CVE-2007-1741 CWE-362 CWE-362 Medium Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226) CVE-2014-0226 CWE-362 CWE-362 Medium Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-0217) CVE-2019-0217 CWE-362 CWE-362 High Apache HTTP Server Configuration Vulnerability (CVE-2009-1195) CVE-2009-1195 Medium Apache HTTP Server Confusion Attacks CVE-2024-38472 CVE-2024-39573 CVE-2024-38477 CVE-2024-38476 CVE-2024-38475 CVE-2024-38474 CVE-2024-38473 CVE-2023-38709 CWE-436 CWE-436 High Apache HTTP Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-6420) CVE-2007-6420 CWE-352 CWE-352 Medium Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2009-3555) CVE-2009-3555 Medium Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2016-0736) CVE-2016-0736 High Apache HTTP Server CVE-1999-0070 Vulnerability (CVE-1999-0070) CVE-1999-0070 Medium 12345...335 2 / 335
