Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache HTTP Server Use of Uninitialized Resource Vulnerability (CVE-2020-1934) Medium Apache JServ protocol service Medium Apache Kafka Unauthorized Access Vulnerability Medium Apache Log4j2 JNDI Remote Code Execution Critical Apache Log4j2 JNDI Remote Code Execution (404 page handler) Critical Apache Log4j2 JNDI Remote Code Execution (delayed) Critical Apache Log4j2 JNDI Remote Code Execution (per folder) Critical Apache Log4j socket receiver deserialization vulnerability Critical Apache mod_jk access control bypass Medium Apache mod_negotiation filename bruteforcing Low Apache mod_rewrite off-by-one buffer overflow vulnerability High Apache mod_rewrite open redirect Medium Apache OFBiz Authentication Bypass (CVE-2023-51467) Critical Apache OFBiz Log4Shell RCE High Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856) Critical Apache OFBiz RCE (CVE-2024-45195) Critical Apache OFBiz SOAPService Deserialization RCE High Apache OFBiz SSRF (CVE-2023-50968) High Apache OFBiz SSRF (CVE-2024-45507) Critical Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High Apache perl-status enabled Medium Apache Proxy HTTP CONNECT method enabled Medium Apache read beyond bounds in mod_isapi Vulnerability (CVE-2022-28330) Medium Apache read beyond bounds via ap_rwrite() Vulnerability (CVE-2022-28614) Medium Apache REST RCE CVE-2018-11770 High Apache Roller OGNL injection High Apache Server-Info Detected Medium Apache Server-Status Detected Medium Apache Shiro authentication bypass High Apache Shiro Deserialization RCE High Apache Solr Deserialization of untrusted data via jmx.serviceUrl High Apache Solr endpoint Low Apache Solr Log4Shell RCE High Apache Solr Parameter Injection Medium Apache solr service exposed High Apache Solr SSRF CVE-2017-3164 Medium Apache Spark Master Unauthorized Access Vulnerability High Apache Spark Web UI Unauthorized Access Vulnerability Medium Apache stronghold-info enabled Low Apache stronghold-status enabled Low Apache Struts 2 ClassLoader manipulation and denial of service High Apache Struts 2 ClassLoader manipulation and denial of service (S2-020) High Apache Struts2 remote code execution vulnerability Critical Apache Struts2 Remote Command Execution (S2-048) High Apache Struts2 Remote Command Execution (S2-052) High Apache Struts2 Remote Command Execution (S2-053) Critical Apache Struts Path traversal (S2-067/CVE-2024-53677, S2-066/CVE-2023-50164) Critical Apache Struts Remote Code Execution (S2-057) High Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850) High Apache Tapestry weak secret key High Apache Tomcat 7PK - Errors Vulnerability (CVE-2016-8745) High Apache Tomcat 7PK - Security Features Vulnerability (CVE-2002-0493) High Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9634) Medium Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9635) Medium Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-38286) High Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-8037) Medium Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-43980) Low Apache Tomcat Configuration Vulnerability (CVE-2008-0128) Medium Apache Tomcat Configuration Vulnerability (CVE-2010-4312) Medium Apache Tomcat Credentials Management Errors Vulnerability (CVE-2009-3548) High Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-4724) Medium Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-6357) Medium Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5351) High Apache Tomcat Cryptographic Issues Vulnerability (CVE-2011-5064) Medium Apache Tomcat CVE-2012-5568 Vulnerability (CVE-2012-5568) Medium Apache Tomcat CVE-2016-6794 Vulnerability (CVE-2016-6794) Medium Apache Tomcat CVE-2016-8735 Vulnerability (CVE-2016-8735) Critical Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651) Critical Apache Tomcat CVE-2018-1304 Vulnerability (CVE-2018-1304) Medium Apache Tomcat CVE-2018-1305 Vulnerability (CVE-2018-1305) Medium Apache Tomcat CVE-2019-2684 Vulnerability (CVE-2019-2684) Medium Apache Tomcat CVE-2020-0822 Vulnerability (CVE-2020-0822) High Apache Tomcat CVE-2020-13943 Vulnerability (CVE-2020-13943) Medium Apache Tomcat CVE-2022-29885 Vulnerability (CVE-2022-29885) High Apache Tomcat CVE-2023-34981 Vulnerability (CVE-2023-34981) High 1...5678...306 6 / 306
