Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5320) Medium e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1409) Medium e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4084) High e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4921) Medium e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4946) Medium e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10378) High e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16389) Medium e107 Inadequate Encryption Strength Vulnerability (CVE-2021-27885) High e107 Other Vulnerability (CVE-2003-1191) Medium e107 Other Vulnerability (CVE-2004-2028) Medium e107 Other Vulnerability (CVE-2004-2031) Medium e107 Other Vulnerability (CVE-2004-2039) Medium e107 Other Vulnerability (CVE-2004-2040) Medium e107 Other Vulnerability (CVE-2004-2042) High e107 Other Vulnerability (CVE-2004-2262) Medium e107 Other Vulnerability (CVE-2005-1949) High e107 Other Vulnerability (CVE-2005-1966) High e107 Other Vulnerability (CVE-2005-2327) Medium e107 Other Vulnerability (CVE-2005-2559) High e107 Other Vulnerability (CVE-2005-2805) Medium e107 Other Vulnerability (CVE-2005-3521) High e107 Other Vulnerability (CVE-2005-3594) Medium e107 Other Vulnerability (CVE-2005-4051) Medium e107 Other Vulnerability (CVE-2005-4224) High e107 Other Vulnerability (CVE-2006-0682) Medium e107 Other Vulnerability (CVE-2006-2590) Medium e107 Other Vulnerability (CVE-2006-2591) Medium e107 Other Vulnerability (CVE-2006-3259) Medium e107 Other Vulnerability (CVE-2006-4548) High e107 Other Vulnerability (CVE-2006-4757) Medium e107 Other Vulnerability (CVE-2006-4794) Medium e107 Other Vulnerability (CVE-2006-5786) High e107 Other Vulnerability (CVE-2007-3429) Medium e107 Other Vulnerability (CVE-2010-0996) Medium e107 Other Vulnerability (CVE-2010-2098) High e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2020) Medium e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-2099) High e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16388) High easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5212) Medium easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1403) Medium easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27739) Medium Edge Side Include injection High Ektron CMS400.NET ContentRatingGraph.aspx SQL injection High Ektron CMS Account Hijack High Ektron CMS authentication bypass High Ektron CMS multiple vulnerabilities High EktronCMS Saxon XSLT parser remote code execution High Ektron CMS unauthenticated code execution and Local File Read High Elasticsearch remote code execution High Elasticsearch service accessible High elFinder RCE (CVE-2021-32682) High Elgg Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3964) Medium Elgg Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2021-3980) High Elgg Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3733) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2935) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6561) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0234) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4072) Medium Elgg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2936) Critical Elgg Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6562) Medium Elgg Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6563) Medium Elgg URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-11016) Medium Elmah.axd / Errorlog.axd Detected High Email Header Injection High Email Header Injection (AcuSensor) High Email injection High Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4170) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0013) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0014) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0046) Low Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1866) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7565) Medium Envoy Metadata disclosure Low Envoy mishandles dropped and truncated datagrams Issue (CVE-2020-35471) High Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-15225) High 1...34353637...306 35 / 306
