Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1410) Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22462) Medium Grafana Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2024-9264) High Grafana Improper Preservation of Permissions Vulnerability (CVE-2022-36062) Low Grafana Improper Synchronization Vulnerability (CVE-2023-2801) Medium Grafana Improper Verification of Cryptographic Signature Vulnerability (CVE-2022-31123) High Grafana Incorrect Authorization Vulnerability (CVE-2021-28146) Medium Grafana Incorrect Authorization Vulnerability (CVE-2022-21713) Medium Grafana Incorrect Authorization Vulnerability (CVE-2022-31107) High Grafana Incorrect Authorization Vulnerability (CVE-2023-6152) Medium Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-27962) High Grafana Insufficiently Protected Credentials Vulnerability (CVE-2019-15635) Medium Grafana Insufficiently Protected Credentials Vulnerability (CVE-2022-31130) High Grafana Missing Authentication for Critical Function Vulnerability (CVE-2019-15043) High Grafana Missing Authentication for Critical Function Vulnerability (CVE-2022-28660) Critical Grafana Missing Authorization Vulnerability (CVE-2023-2183) Medium Grafana Other Vulnerability (CVE-2021-28147) Medium Grafana Plugin Dir Traversal (CVE-2021-43798) High Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379) High Grafana Signature Verification Vulnerability (CVE-2020-27846) Critical Grafana Snapshot Authentication Bypass (CVE-2021-39226) High Grafana URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-29170) High Grails database console Medium Grandnode Path Traversal (CVE-2019-12276) High GraphiQL Explorer/Playground Enabled Medium GraphQL Alias Overloading Allowed: Potential Denial of Service Vulnerability Medium GraphQL Array-based Query Batching Allowed: Potential Batching Attack Vulnerability Medium GraphQL Circular-Query via Introspection Allowed: Potential DoS Vulnerability Medium GraphQL Field Suggestions Enabled Medium GraphQL Introspection Query Enabled Medium GraphQL Non-JSON Mutations over GET: Potential CSRF Vulnerability Medium GraphQL Non-JSON Queries over GET: Potential CSRF Vulnerability Medium GraphQL Non-JSON Queries over POST: Potential CSRF Vulnerability Medium GraphQL Unauthenticated Mutation Detected Medium GraphQL Unhandled Error Leakage Medium Grav CMS Unauthenticated RCE (CVE-2021-21425) High GSAP CVE-2020-28478 Vulnerability (CVE-2020-28478) High Gunicorn Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2018-1000164) High H2 console publicly accessible Low Hadoop cluster web interface Medium Hadoop YARN ResourceManager publicly accessible High Handlebars CVE-2021-23369 Vulnerability (CVE-2021-23369) Critical Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920) High Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8861) Medium Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-19919) Critical Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922) High Handlebars Other Vulnerability (CVE-2021-23383) Critical Harbor Unauthorized Access Vulnerability High Hashicorp Consul API is accessible without authentication Medium Hasura GraphQL API without authentication Medium Hesk Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3743) Medium Hesk Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5287) Medium Hesk Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13897) Medium Hiawatha Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8358) High Hibernate Query Language (HQL) Injection High Highcharts JS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29489) Medium Highcharts JS Incorrect Regular Expression Vulnerability (CVE-2018-20801) High HipChat for JIRA plugin - Velocity template injection High Horde/IMP Plesk webmail exploit High Horde Imp Unauthenticated Remote Command Execution High Horde remote code execution High Horizontal Broken Function Level Authorization (BFLA) High Horizontal IDOR/BOLA (Broken Object Level Authorization) High Host header attack Medium Hostile subdomain takeover Medium HSQLDB CVE-2022-41853 Vulnerability (CVE-2022-41853) Critical HTML Attribute Injection Low HTML Form found in redirect page Low HTML form susceptible to spam Medium HTML Injection Medium HTTP.sys remote code execution vulnerability High HTTP/2 pseudo-header server side request forgery High HTTP Header Injection Medium HTTP header reflected in cached response Medium Httpoxy vulnerability Medium 1...39404142...306 40 / 306
