Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-27962) High Grafana Insecure Default Initialization of Resource Vulnerability (CVE-2026-33376) High Grafana Insufficiently Protected Credentials Vulnerability (CVE-2022-31130) High Grafana Missing Authentication for Critical Function Vulnerability (CVE-2019-15043) High Grafana Open Redirect (CVE-2025-4123) High Grafana Out-of-bounds Write Vulnerability (CVE-2026-27880) High Grafana Plugin Dir Traversal (CVE-2021-43798) High Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379) High Grafana Snapshot Authentication Bypass (CVE-2021-39226) High Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-8609) High Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-21720) High Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33382) High Grafana URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-29170) High Grandnode Path Traversal (CVE-2019-12276) High Grav CMS Unauthenticated RCE (CVE-2021-21425) High GSAP CVE-2020-28478 Vulnerability (CVE-2020-28478) High Gunicorn Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2018-1000164) High Hadoop YARN ResourceManager publicly accessible High Handlebars Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-33939) High Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920) High Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33938) High Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33940) High Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33941) High Handlebars Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20922) High Harbor Unauthorized Access Vulnerability High Hiawatha Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8358) High Hibernate Query Language (HQL) Injection High Highcharts JS Incorrect Regular Expression Vulnerability (CVE-2018-20801) High HipChat for JIRA plugin - Velocity template injection High Horde/IMP Plesk webmail exploit High Horde Imp Unauthenticated Remote Command Execution High Horde remote code execution High Horizontal Broken Function Level Authorization (BFLA) High Horizontal IDOR/BOLA (Broken Object Level Authorization) High HTTP.sys remote code execution vulnerability High HTTP/2 pseudo-header server side request forgery High Http redirect security bypass High HTTP verb tampering via POST High IBMHttpServer Expired Pointer Dereference Vulnerability (CVE-2026-8854) High IBMHttpServer Heap-based Buffer Overflow Vulnerability (CVE-2026-8834) High IBMHttpServer Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-9170) High IBMHttpServer Improper Input Validation Vulnerability (CVE-2023-26281) High IBMHttpServer NULL Pointer Dereference Vulnerability (CVE-2026-8850) High IBMHttpServer Observable Discrepancy Vulnerability (CVE-2023-32342) High IBMHttpServer Other Vulnerability (CVE-2000-1168) High IBMHttpServer Other Vulnerability (CVE-2004-1082) High IBMHttpServer Reachable Assertion Vulnerability (CVE-2026-8852) High IBMHttpServer Untrusted Pointer Dereference Vulnerability (CVE-2026-8835) High IBM Lotus Domino web server Cross-Site Scripting vulnerabilities High IBM RTC Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-4252) High IBM RTC Improper Privilege Management Vulnerability (CVE-2021-29774) High IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-9707) High IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-1103) High IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502) High IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2017-1701) High IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2020-4965) High IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7440) High IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844) High IBM Web Content Manager XPath injection High IBM WebSEAL 7PK - Security Features Vulnerability (CVE-2016-3025) High IBM WebSEAL CVE-2018-1850 Vulnerability (CVE-2018-1850) High IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135) High IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145) High IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036) High IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707) High IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2018-1814) High IBM WebSEAL Insufficiently Protected Credentials Vulnerability (CVE-2021-20439) High IBM WebSEAL Other Vulnerability (CVE-2023-30997) High IBM WebSEAL Other Vulnerability (CVE-2023-30998) High IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2023-38371) High IBM WebSEAL Use of Hard-coded Credentials Vulnerability (CVE-2018-1887) High IBM WebSphere/WebLogic application source file exposure High IBM WebSphere administration console weak password High IBM WebSphere RCE Java Deserialization Vulnerability High IIS extended unicode directory traversal vulnerability High 1...18192021...179 19 / 179
