Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity MODX Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-25911) CVE-2020-25911 CWE-611 CWE-611 Critical MongoDb CVE-2017-15535 Vulnerability (CVE-2017-15535) CVE-2017-15535 Critical MongoDb Improper Certificate Validation Vulnerability (CVE-2024-1351) CVE-2024-1351 CWE-295 CWE-295 Critical MongoDb Improper Check for Certificate Revocation Vulnerability (CVE-2025-3085) CVE-2025-3085 CWE-299 CWE-299 Critical MongoDb Use of Uninitialized Resource Vulnerability (CVE-2024-8654) CVE-2024-8654 CWE-908 CWE-908 Critical Moodle CVE-2019-14880 Vulnerability (CVE-2019-14880) CVE-2019-14880 Critical Moodle CVE-2021-36394 Vulnerability (CVE-2021-36394) CVE-2021-36394 Critical Moodle CVE-2022-40314 Vulnerability (CVE-2022-40314) CVE-2022-40314 Critical Moodle CVE-2024-33999 Vulnerability (CVE-2024-33999) CVE-2024-33999 Critical Moodle CVE-2025-67856 Vulnerability (CVE-2025-67856) CVE-2025-67856 Critical Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-28333) CVE-2023-28333 CWE-94 CWE-94 Critical Moodle Improper Input Validation Vulnerability (CVE-2006-4935) CVE-2006-4935 CWE-20 CWE-20 Critical Moodle Improper Input Validation Vulnerability (CVE-2006-4936) CVE-2006-4936 CWE-20 CWE-20 Critical Moodle Improper Input Validation Vulnerability (CVE-2021-3943) CVE-2021-3943 CWE-20 CWE-20 Critical Moodle Improper Input Validation Vulnerability (CVE-2022-35649) CVE-2022-35649 CWE-20 CWE-20 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-2641) CVE-2017-2641 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-36392) CVE-2021-36392 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-36393) CVE-2021-36393 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-0332) CVE-2022-0332 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-30599) CVE-2022-30599 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-40315) CVE-2022-40315 CWE-138 CWE-138 Critical Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-26533) CVE-2025-26533 CWE-138 CWE-138 Critical Moodle Incorrect Calculation Vulnerability (CVE-2022-30600) CVE-2022-30600 CWE-682 CWE-682 Critical Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-21809) CVE-2021-21809 CWE-732 CWE-732 Critical Moodle Other Vulnerability (CVE-2004-2233) CVE-2004-2233 Critical Moodle Other Vulnerability (CVE-2004-2235) CVE-2004-2235 Critical Moodle Other Vulnerability (CVE-2004-2236) CVE-2004-2236 Critical Moodle Other Vulnerability (CVE-2004-2237) CVE-2004-2237 Critical Moodle Other Vulnerability (CVE-2005-2247) CVE-2005-2247 Critical Moodle Other Vulnerability (CVE-2023-5550) CVE-2023-5550 Critical Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-3809) CVE-2019-3809 CWE-918 CWE-918 Critical Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-45152) CVE-2022-45152 CWE-918 CWE-918 Critical MOVEit Transfer Improper Authentication Vulnerability (CVE-2024-6576) CVE-2024-6576 CWE-287 CWE-287 Critical MOVEit Transfer Improper Authentication Vulnerability (CVE-2026-10697) CVE-2026-10697 CWE-287 CWE-287 Critical MOVEit Transfer Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-8649) CVE-2026-8649 CWE-138 CWE-138 Critical MOVEit Transfer Insufficient Session Expiration Vulnerability (CVE-2026-15967) CVE-2026-15967 CWE-613 CWE-613 Critical MOVEit Transfer Path Equivalence: 'filename ' (Trailing Space) Vulnerability (CVE-2026-8801) CVE-2026-8801 CWE-46 CWE-46 Critical MOVEit Transfer Permissive Cross-domain Policy with Untrusted Domains Vulnerability (CVE-2026-15966) CVE-2026-15966 CWE-942 CWE-942 Critical Mura/Masa CMS JSON API RCE CWE-200 CWE-200 Critical Mura/Masa CMS SQLi (CVE-2024-32640) CVE-2024-32640 CWE-89 CWE-89 Critical MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-16780) CVE-2017-16780 CWE-352 CWE-352 Critical MyBB CVE-2006-0218 Vulnerability (CVE-2006-0218) CVE-2006-0218 Critical MyBB CVE-2011-5133 Vulnerability (CVE-2011-5133) CVE-2011-5133 Critical MyBB CVE-2015-2786 Vulnerability (CVE-2015-2786) CVE-2015-2786 Critical MyBB CVE-2020-22612 Vulnerability (CVE-2020-22612) CVE-2020-22612 Critical MyBB Improper Access Control Vulnerability (CVE-2016-9412) CVE-2016-9412 CWE-284 CWE-284 Critical MyBB Improper Input Validation Vulnerability (CVE-2016-9420) CVE-2016-9420 CWE-20 CWE-20 Critical MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-8974) CVE-2015-8974 CWE-138 CWE-138 Critical MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-9402) CVE-2016-9402 CWE-138 CWE-138 Critical MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-9416) CVE-2016-9416 CWE-138 CWE-138 Critical MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9403) CVE-2016-9403 CWE-264 CWE-264 Critical MySQL CVE-2012-2750 Vulnerability (CVE-2012-2750) CVE-2012-2750 Critical MySQL CVE-2012-3163 Vulnerability (CVE-2012-3163) CVE-2012-3163 Critical MySQL CVE-2016-0639 Vulnerability (CVE-2016-0639) CVE-2016-0639 Critical MySQL CVE-2016-9841 Vulnerability (CVE-2016-9841) CVE-2016-9841 Critical MySQL CVE-2016-9843 Vulnerability (CVE-2016-9843) CVE-2016-9843 Critical MySQL Deserialization of Untrusted Data Vulnerability (CVE-2019-14540) CVE-2019-14540 CWE-502 CWE-502 Critical MySQL Deserialization of Untrusted Data Vulnerability (CVE-2019-14893) CVE-2019-14893 CWE-502 CWE-502 Critical MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2004-0836) CVE-2004-0836 CWE-119 CWE-119 Critical MySQL Other Vulnerability (CVE-2003-0150) CVE-2003-0150 Critical MySQL Other Vulnerability (CVE-2003-0780) CVE-2003-0780 Critical MySQL Other Vulnerability (CVE-2016-0705) CVE-2016-0705 Critical MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-6662) CVE-2016-6662 CWE-264 CWE-264 Critical Next.js/React Server Components RCE (CVE-2025-55182 & CVE-2025-66478) CVE-2025-55182 CVE-2025-66478 CWE-94 CWE-502 CWE-94 CWE-502 Critical Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-55182) CVE-2025-55182 CWE-502 CWE-502 Critical Nexus Repository Manager CVE-2019-7238 Vulnerability (CVE-2019-7238) CVE-2019-7238 Critical Nexus Repository Manager Improper Authentication Vulnerability (CVE-2019-9629) CVE-2019-9629 CWE-287 CWE-287 Critical Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2017-17717) CVE-2017-17717 CWE-327 CWE-327 Critical Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-20005) CVE-2017-20005 CWE-190 CWE-190 Critical Nginx Other Vulnerability (CVE-2016-0746) CVE-2016-0746 Critical Nginx UI Information Disclosure (CVE-2026-27944) CVE-2026-27944 CWE-306 CWE-311 CWE-306 CWE-311 Critical Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834) CVE-2023-40834 CWE-307 CWE-307 Critical Opencart Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-3990) CVE-2014-3990 CWE-611 CWE-611 Critical OpenMetadata Authentication Bypass (CVE-2024-28255) CVE-2024-28255 CWE-287 CWE-287 Critical Open Resty Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9230) CVE-2018-9230 CWE-138 CWE-138 Critical 1...891011...23 9 / 23
