Vulnerability Name CVE Severity
WPEngine _wpeprivate/config.json information disclosure
X-Forwarded-For HTTP header security bypass
Xdebug remote code execution via xdebug.remote_connect_back
XML entity injection
XML external entity injection
XML external entity injection (variant)
XML external entity injection and XML injection
XML External Entity Injection via external file
XML external entity injection via File Upload
XML quadratic blowup denial of service attack
XOOPS CVE-2009-3963 Vulnerability (CVE-2009-3963)
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0612)
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3296)
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2002-2391)
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0611)
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433)
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5665)
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-7290)
XOOPS Other Vulnerability (CVE-2005-0743)
XOOPS Other Vulnerability (CVE-2005-2113)
XOOPS Other Vulnerability (CVE-2007-0377)
XPath injection vulnerability
XSLT injection
XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-41927)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-29213)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-40572)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242)
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-48293)
XWiki CVE-2022-31166 Vulnerability (CVE-2022-31166)
XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471)
XWiki CVE-2023-26474 Vulnerability (CVE-2023-26474)
XWiki CVE-2023-35166 Vulnerability (CVE-2023-35166)
XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573)
XWiki CVE-2023-48241 Vulnerability (CVE-2023-48241)
XWiki Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2022-41936)
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208)
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-34467)
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-35151)
XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-29517)
XWiki Improper Authentication Vulnerability (CVE-2022-36092)
XWiki Improper Authentication Vulnerability (CVE-2022-36093)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-11057)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29209)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29210)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29211)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29212)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29214)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30537)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35150)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35152)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37909)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37914)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-40177)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50723)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-13654)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36099)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36100)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-41934)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135)
XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)
XWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-37913)
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41928)
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41931)
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511)
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-37462)
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-50722)
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15252)
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29510)
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512)
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29514)