Vulnerability Name CVE Severity
Error page path disclosure
Error page web server version disclosure
EspoCRM Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-38846)
EspoCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7985)
EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38844)
EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38845)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7987)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17301)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17302)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-13643)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14329)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14330)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14331)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14349)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14350)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14546)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14547)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14548)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14549)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14550)
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3539)
EspoCRM Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2019-14351)
EspoCRM Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7986)
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-46736)
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-38843)
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5965)
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
Express cookie-session weak secret key
Express Development Mode enabled
Express express-session weak secret key
Expression language injection
ExpressJs Local File Read via the layout parameter
Ext JS arbitrary file read
Ext JS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-8046)
Ext JS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2007-6758)
F5 BIG-IP Cookie Information Disclosure
F5 BIG-IP Request Smuggling (CVE-2023-46747)
F5 BIG-IP Traffic Management User Interface (TMUI) RCE
F5 iControl REST unauthenticated remote command execution vulnerability
Family Connections Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-0699)
Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-3419)
Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-5130)
Family Connections Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-2901)
Family Connections Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2010)
Family Connections Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-4338)
fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1494)
FastAdmin Path Traversal (CVE-2024-7928)
FastCGI Unauthorized Access Vulnerability
FCKeditor arbitrary file upload
FCKeditor spellchecker.php cross site scripting vulnerability
File Content Disclosure in Action View
File creation via HTTP method PUT
File tampering
File Upload Functionality Detected
File upload XSS (Java applet)
Firebase database accessible without authentication
Flask debug mode
Flask weak secret key
Flex BlazeDS AMF Deserialization RCE
Flowise Authentication Bypass (CVE-2024-31621)
FluxBB CVE-2011-3621 Vulnerability (CVE-2011-3621)
FluxBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9574)
FluxBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35240)
FluxBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43677)
FluxBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-10029)
FluxBB Other Vulnerability (CVE-2014-10030)
FluxBB Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2020-28873)
ForgeRock AM / OpenAM Deserialization RCE (CVE-2021-35464)
ForgeRock OpenAM Deserialization RCE (CVE-2021-29156)
Fortigate SSL VPN Arbitrary File reading (CVE-2018-13379)
Fortinet Authentication bypass on administrative interface
Fortinet FortiNAC RCE via arbitrary file upload
Fortinet Out-Of-Bound Memory Write RCE (CVE-2024-21762)
FrontAccounting Cross-site Request Forgery (CSRF) Vulnerability (CVE-2018-7176)
Frontaccounting Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3740)