Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Owasp Api Bfla Owasp Api Bola Owasp Api Broken Auth Owasp Api Broken Object Prop Auth Owasp Api Dos Owasp Api Improper Inventory Management Owasp Api Misconfiguration Owasp Api Ssrf Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41182) CVE-2021-41182 CWE-707 CWE-707 Medium jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183) CVE-2021-41183 CWE-707 CWE-707 Medium jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41184) CVE-2021-41184 CWE-707 CWE-707 Medium jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160) CVE-2022-31160 CWE-707 CWE-707 Medium jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312) CVE-2010-5312 CWE-707 CWE-707 Medium jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41182) CVE-2021-41182 CWE-707 CWE-707 Medium jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183) CVE-2021-41183 CWE-707 CWE-707 Medium jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41184) CVE-2021-41184 CWE-707 CWE-707 Medium jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160) CVE-2022-31160 CWE-707 CWE-707 Medium jQuery Validation Other Vulnerability (CVE-2021-43306) CVE-2021-43306 High jQuery Validation Other Vulnerability (CVE-2022-31147) CVE-2022-31147 High jQuery Validation Uncontrolled Resource Consumption Vulnerability (CVE-2021-21252) CVE-2021-21252 CWE-400 CWE-400 High JSF ViewState client side storage CWE-693 CWE-693 Medium JSONP enabled by default in MappingJackson2JsonView CVE-2018-11040 CWE-538 CWE-538 Medium JSP authentication bypass CWE-287 CWE-287 High jszip CVE-2021-23413 Vulnerability (CVE-2021-23413) CVE-2021-23413 Medium jszip Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-48285) CVE-2022-48285 CWE-22 CWE-22 High Juniper Junos OS J-Web RCE (CVE-2023-36845/CVE-2023-36846) CVE-2023-36845 CVE-2023-36846 CWE-473 CWE-473 Critical Jupyter Notebook publicly accessible CWE-78 CWE-78 High JVM version leakage CWE-200 CWE-200 Informational JWT Signature Bypass via kid Path Traversal CWE-287 CWE-287 High JWT Signature Bypass via kid SQL injection CWE-287 CWE-287 High JWT Signature Bypass via None Algorithm CWE-345 CWE-345 High JWT Signature Bypass via unvalidated jku parameter CWE-287 CWE-287 High JWT Signature Bypass via unvalidated jwk parameter CWE-287 CWE-287 High JWT Signature Bypass via unvalidated x5c parameter CWE-287 CWE-287 High JWT Signature Bypass via unvalidated x5u parameter CWE-287 CWE-287 High JWT Signature is not Verified CWE-287 CWE-287 High Kayako Fusion v4.51.1891 - multiple web vulnerabilities CWE-79 CWE-79 High Kentico CMS Deserialization RCE CVE-2019-10068 CWE-502 CWE-502 High Kentico CMS RCE CVE-2017-17736 CVE-2017-17736 CWE-425 CWE-425 High Kentico Staging API Authentication Bypass CWE-287 CWE-287 Critical Kentico Staging API publicly accessible CWE-200 CWE-200 Low Keycloak clients-registrations XSS (CVE-2021-20323) CVE-2021-20323 CWE-79 CWE-79 Medium KeyCloak Information Disclosure (CVE-2020-27838) CVE-2020-27838 CWE-287 CWE-287 Medium Keycloak request_uri SSRF (CVE-2020-10770) CVE-2020-10770 CWE-918 CWE-918 Medium Knockout.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14862) CVE-2019-14862 CWE-707 CWE-707 Medium Kong Server Incorrect Authorization Vulnerability (CVE-2021-27306) CVE-2021-27306 CWE-863 CWE-863 High Kong Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487) CVE-2023-44487 CWE-400 CWE-400 High Kramer VIAware RCE (CVE-2021-36356/CVE-2021-35064) CVE-2021-36356 CVE-2019-17124 CVE-2021-35064 CWE-434 CWE-434 Critical Laravel debug mode enabled CWE-200 CWE-200 Medium Laravel debug mode enabled (AcuSensor) CWE-16 CWE-16 Medium Laravel framework weak secret key CWE-693 CWE-693 Medium Laravel Health Monitor open CWE-200 CWE-200 Medium Laravel Horizon open CWE-200 CWE-200 Medium Laravel Ignition Reflected Cross-Site Scripting CWE-80 CWE-80 Medium Laravel log file publicly accessible CWE-538 CWE-538 Medium Laravel log viewer local file download (LFD) CVE-2018-8947 CWE-22 CWE-22 High Laravel LogViewer open CWE-200 CWE-200 Medium Laravel Telescope open CWE-200 CWE-200 Medium Laravel Terminal open CWE-200 CWE-200 High LDAP injection CWE-20 CWE-20 High Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25143) CVE-2024-25143 CWE-770 CWE-770 Medium Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-26265) CVE-2024-26265 CWE-770 CWE-770 Medium Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129) CVE-2022-42129 CWE-639 CWE-639 Medium Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-8980) CVE-2024-8980 CWE-352 CWE-352 Medium Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26271) CVE-2024-26271 CWE-352 CWE-352 High Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26272) CVE-2024-26272 CWE-352 CWE-352 High Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26273) CVE-2024-26273 CWE-352 CWE-352 High Liferay DXP CVE-2021-29041 Vulnerability (CVE-2021-29041) CVE-2021-29041 Medium Liferay DXP CVE-2021-33330 Vulnerability (CVE-2021-33330) CVE-2021-33330 Medium Liferay DXP CVE-2021-38266 Vulnerability (CVE-2021-38266) CVE-2021-38266 High Liferay DXP CVE-2022-42126 Vulnerability (CVE-2022-42126) CVE-2022-42126 Medium Liferay DXP CVE-2022-45320 Vulnerability (CVE-2022-45320) CVE-2022-45320 Medium Liferay DXP CVE-2024-25148 Vulnerability (CVE-2024-25148) CVE-2024-25148 High Liferay DXP Deserialization of Untrusted Data Vulnerability (CVE-2020-15842) CVE-2020-15842 CWE-502 CWE-502 High Liferay DXP Excessive Iteration Vulnerability (CVE-2024-25144) CVE-2024-25144 CWE-834 CWE-834 Medium Liferay DXP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-42132) CVE-2022-42132 CWE-200 CWE-200 Medium Liferay DXP Improper Certificate Validation Vulnerability (CVE-2022-42131) CVE-2022-42131 CWE-295 CWE-295 Medium Liferay DXP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123) CVE-2022-42123 CWE-22 CWE-22 High Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29049) CVE-2021-29049 CWE-707 CWE-707 Medium Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38263) CVE-2021-38263 CWE-707 CWE-707 Medium Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38265) CVE-2021-38265 CWE-707 CWE-707 Medium Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38267) CVE-2021-38267 CWE-707 CWE-707 Medium Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38269) CVE-2021-38269 CWE-707 CWE-707 Medium 1...61626364...307 62 / 307
