Vulnerability Name CVE Severity
CubeCart Improper Access Control Vulnerability (CVE-2015-6928)
CubeCart Improper Authentication Vulnerability (CVE-2014-2341)
CubeCart Improper Input Validation Vulnerability (CVE-2012-0865)
CubeCart Improper Input Validation Vulnerability (CVE-2013-1465)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2090)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2098)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2117)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-42428)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-47283)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-34832)
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496)
CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1550)
CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20703)
CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-59411)
CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-59412)
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675)
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-21719)
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4060)
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1931)
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4903)
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20716)
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-34018)
CubeCart Insufficient Session Expiration Vulnerability (CVE-2025-59335)
CubeCart Missing Authorization Vulnerability (CVE-2025-59413)
CubeCart Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3904)
CubeCart Session Fixation Vulnerability (CVE-2021-33394)
CubeCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-33438)
Custom Error Pages Are Not Configured in WEB-INF/web.xml
Custom Vulnerability Alert
CVS Detected
CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution (CVE-2025-48703)
CyberPanel RCE (CVE-2024-51567/CVE-2024-51568/CVE-2024-51378)
D-Link NAS Backdoor Account RCE (CVE-2024-3273, CVE-2024-3272)
D3.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16044)
data: Used in a Content Security Policy (CSP) Directive
Database User Has Admin Privileges
Data Binding Expression Vulnerability in Spring Web Flow
datatables Cross-site Scripting (XSS) Vulnerability (CVE-2015-6584)
DataTables Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-11031)
DataTables Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-23445)
DataTables Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36713)
DataTables Prototype Pollution Vulnerability (CVE-2020-28458)
default-src Used in Content Security Policy (CSP)
Delve Debugger Unauthorized Access Vulnerability
Deprecated Header Instruction Used to Implement Content Security Policy (CSP)
Deserialization of Untrusted Data (.NET BinaryFormatter Object Deserialization)
Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson
Deserialization of Untrusted Data (Java JSON Deserialization) Genson
Deserialization of Untrusted Data (Java JSON Deserialization) Jackson
Deserialization of Untrusted Data (Java JSON Deserialization) JsonIO
Deserialization of Untrusted Data (Java Object Deserialization)
Deserialization of Untrusted Data (XStream)
Development configuration files
Devise weak password
Directory listings
Directory traversal
Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.6.x
Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.8.x
Directory Traversal with spring-cloud-config-server
Django 7PK - Security Features Vulnerability (CVE-2016-7401)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-53907)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-56374)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-26699)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-27556)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-32873)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-25673)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-33034)
Django Authentication Bypass by Spoofing Vulnerability (CVE-2026-3902)
Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2019-12781)
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666)
Django Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-25674)