Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Coppermine Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7186) Medium Core dump checker PHP script Medium Core dump file High CouchDB REST API publicly accessible High cPanel XSS (CVE-2023-29489) Medium Craft CMS CVE-2017-8383 Vulnerability (CVE-2017-8383) Medium Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622) High Craft CMS Development Mode enabled Medium Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14280) Medium Craft CMS Files or Directories Accessible to External Parties Vulnerability (CVE-2024-52292) Medium Craft CMS Improper Authentication Vulnerability (CVE-2024-41800) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-27903) Critical Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30130) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30179) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41892) Critical Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-23209) High Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52291) High Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52293) High Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824) High Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8052) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-8384) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9516) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20418) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9554) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12823) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17496) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19626) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27902) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32470) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28378) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37246) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37247) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37248) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37250) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37251) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2817) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23927) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-30177) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31144) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33194) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33195) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33196) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33197) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33495) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36259) Medium Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-45406) Medium Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-9757) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-32679) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36260) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-40035) High Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843) Critical Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465) High Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2022-37783) High Craft CMS RCE (CVE-2023-41892) Critical Craft CMS register_argc_argv RCE (CVE-2024-56145) Critical Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814) High Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2017-8385) Medium Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-15929) Critical Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-29933) High CRIME SSL/TLS attack Medium CRLF injection/HTTP response splitting (Web Server) Medium CRMEB SQL Injection (CVE-2024-36837) High Cross-Site Request Forgery (CSRF) (CMS Made Simple) Medium Cross-site Scripting High Cross-site Scripting (DOM based) High Cross-site Scripting via File Upload High Cross-site Scripting via Remote File Inclusion High Cross-site scripting vulnerability in Google Web Toolkit High Cross-site scripting vulnerability in Google Web Toolkit (CVE-2012-5920) High Cross frame scripting Medium Cross Site Scripting (Category Description) (CMS Made Simple) Medium Cross Site Scripting (globalmetadata) (CMS Made Simple) Medium Cross site scripting (requiring unencoded quote) Low Cross site scripting (XSS) in ASP.NET via ResolveUrl High Cross site scripting in HTTP-01 ACME challenge implementation High 1...20212223...306 21 / 306
