Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity ActiveMQ OpenWire RCE (CVE-2023-46604) Critical Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102) Critical Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51490) Critical Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15153) Critical Apache HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-11984) Critical Apache HTTP Server CVE-2003-0789 Vulnerability (CVE-2003-0789) Critical Apache HTTP Server CVE-2005-2700 Vulnerability (CVE-2005-2700) Critical Apache HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425) Critical Apache HTTP Server CVE-2024-38476 Vulnerability (CVE-2024-38476) Critical Apache HTTP Server Improper Authentication Vulnerability (CVE-2017-3167) Critical Apache HTTP Server Improper Authentication Vulnerability (CVE-2018-1312) Critical Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38474) Critical Apache HTTP Server Improper Handling of Case Sensitivity Vulnerability (CVE-2001-0766) Critical Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-9788) Critical Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-7679) Critical Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-36760) Critical Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-25690) Critical Apache HTTP Server Insufficient Verification of Data Authenticity Vulnerability (CVE-2022-31813) Critical Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-22721) Critical Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-28615) Critical Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-3169) Critical Apache HTTP Server Other Vulnerability (CVE-1999-0067) Critical Apache HTTP Server Other Vulnerability (CVE-1999-0926) Critical Apache HTTP Server Other Vulnerability (CVE-1999-1199) Critical Apache HTTP Server Other Vulnerability (CVE-1999-1293) Critical Apache HTTP Server Other Vulnerability (CVE-2004-0492) Critical Apache HTTP Server Other Vulnerability (CVE-2021-42013) Critical Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-26691) Critical Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275) Critical Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2022-23943) Critical Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-40438) Critical Apache HTTP Server Use After Free Vulnerability (CVE-2019-10082) Critical Apache Log4j2 JNDI Remote Code Execution Critical Apache Log4j2 JNDI Remote Code Execution (404 page handler) Critical Apache Log4j2 JNDI Remote Code Execution (delayed) Critical Apache Log4j2 JNDI Remote Code Execution (per folder) Critical Apache Log4j socket receiver deserialization vulnerability Critical Apache OFBiz Authentication Bypass (CVE-2023-51467) Critical Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856) Critical Apache OFBiz RCE (CVE-2024-45195) Critical Apache OFBiz SSRF (CVE-2024-45507) Critical Apache Struts2 remote code execution vulnerability Critical Apache Struts2 Remote Command Execution (S2-053) Critical Apache Struts Path traversal (S2-067/CVE-2024-53677, S2-066/CVE-2023-50164) Critical Apache Tomcat CVE-2016-8735 Vulnerability (CVE-2016-8735) Critical Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651) Critical Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2025-24813) Critical Apache Tomcat Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-5648) Critical Apache Tomcat Insecure Default Initialization of Resource Vulnerability (CVE-2018-8014) Critical Apache Tomcat Other Vulnerability (CVE-2020-1938) Critical Apache Traffic Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2021-43082) Critical Apache Traffic Server CVE-2014-3525 Vulnerability (CVE-2014-3525) Critical Apache Traffic Server CVE-2015-5168 Vulnerability (CVE-2015-5168) Critical Apache Traffic Server CVE-2015-5206 Vulnerability (CVE-2015-5206) Critical Apache Traffic Server Improper Access Control Vulnerability (CVE-2014-3624) Critical Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-3249) Critical Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-33934) Critical Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17559) Critical Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17565) Critical Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-1944) Critical Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2021-35474) Critical Artifactory CVE-2019-9733 Vulnerability (CVE-2019-9733) Critical Artifactory Improper Input Validation Vulnerability (CVE-2016-6501) Critical Artifactory Improper Privilege Management Vulnerability (CVE-2022-0668) Critical Artifactory Insufficient Verification of Data Authenticity Vulnerability (CVE-2018-19971) Critical Artifactory Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10036) Critical Artifactory Weak Password Requirements Vulnerability (CVE-2019-17444) Critical Atlassian Confluence CVE-2023-22515 Vulnerability (CVE-2023-22515) Critical Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3396) Critical Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-26084) Critical Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22527) Critical Atlassian Confluence Incorrect Authorization Vulnerability (CVE-2023-22518) Critical Atlassian Confluence Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26136) Critical Atlassian Confluence Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26137) Critical Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-3395) Critical 12345...20 1 / 20
