Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Moment.js Other Vulnerability (CVE-2022-31129) CVE-2022-31129 High Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2017-18214) CVE-2017-18214 CWE-400 CWE-400 High MongoDB $where operator JavaScript injection CWE-943 CWE-943 High MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-32036) CVE-2021-32036 CWE-770 CWE-770 High MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1847) CVE-2026-1847 CWE-770 CWE-770 High MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1848) CVE-2026-1848 CWE-770 CWE-770 High MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1850) CVE-2026-1850 CWE-770 CWE-770 High MongoDb CVE-2019-2390 Vulnerability (CVE-2019-2390) CVE-2019-2390 High MongoDb CVE-2024-7553 Vulnerability (CVE-2024-7553) CVE-2024-7553 High MongoDb CVE-2025-6709 Vulnerability (CVE-2025-6709) CVE-2025-6709 High MongoDb Double Free Vulnerability (CVE-2026-4358) CVE-2026-4358 CWE-415 CWE-415 High MongoDb Excessive Iteration Vulnerability (CVE-2025-6714) CVE-2025-6714 CWE-834 CWE-834 High MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2025-0755) CVE-2025-0755 CWE-122 CWE-122 High MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2026-13072) CVE-2026-13072 CWE-122 CWE-122 High MongoDb Improper Authentication Vulnerability (CVE-2015-7882) CVE-2015-7882 CWE-287 CWE-287 High MongoDb Improper Certificate Validation Vulnerability (CVE-2023-1409) CVE-2023-1409 CWE-295 CWE-295 High MongoDb Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2025-14847) CVE-2025-14847 CWE-130 CWE-130 High MongoDb Improper Input Validation Vulnerability (CVE-2020-7925) CVE-2020-7925 CWE-20 CWE-20 High MongoDb Improper Input Validation Vulnerability (CVE-2024-3372) CVE-2024-3372 CWE-20 CWE-20 High MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921) CVE-2024-10921 CWE-158 CWE-158 High MongoDb Incorrect Comparison Vulnerability (CVE-2019-20925) CVE-2019-20925 CWE-697 CWE-697 High MongoDB injection CWE-943 CWE-943 High MongoDb Insufficient Session Expiration Vulnerability (CVE-2019-2386) CVE-2019-2386 CWE-613 CWE-613 High MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914) CVE-2026-6914 CWE-191 CWE-191 High MongoDb Missing Authorization Vulnerability (CVE-2026-13078) CVE-2026-13078 CWE-862 CWE-862 High MongoDb Operation on a Resource after Expiration or Release Vulnerability (CVE-2025-10060) CVE-2025-10060 CWE-672 CWE-672 High MongoDb Out-of-bounds Read Vulnerability (CVE-2017-14227) CVE-2017-14227 CWE-125 CWE-125 High MongoDb Out-of-bounds Read Vulnerability (CVE-2026-13077) CVE-2026-13077 CWE-125 CWE-125 High MongoDb Out-of-bounds Write Vulnerability (CVE-2021-32040) CVE-2021-32040 CWE-787 CWE-787 High MongoDb Out-of-bounds Write Vulnerability (CVE-2026-8053) CVE-2026-8053 CWE-787 CWE-787 High MongoDb Out-of-bounds Write Vulnerability (CVE-2026-9753) CVE-2026-9753 CWE-787 CWE-787 High MongoDb Reachable Assertion Vulnerability (CVE-2025-13644) CVE-2025-13644 CWE-617 CWE-617 High MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability (CVE-2026-13059) CVE-2026-13059 CWE-807 CWE-807 High MongoDb Uncaught Exception Vulnerability (CVE-2025-3083) CVE-2025-3083 CWE-248 CWE-248 High MongoDb Uncontrolled Recursion Vulnerability (CVE-2025-6710) CVE-2025-6710 CWE-674 CWE-674 High MongoDb Uncontrolled Recursion Vulnerability (CVE-2026-1849) CVE-2026-1849 CWE-674 CWE-674 High MongoDb Uncontrolled Recursion Vulnerability (CVE-2026-9740) CVE-2026-9740 CWE-674 CWE-674 High MongoDb Uncontrolled Resource Consumption Vulnerability (CVE-2016-3104) CVE-2016-3104 CWE-400 CWE-400 High MongoDb Use After Free Vulnerability (CVE-2025-6706) CVE-2025-6706 CWE-416 CWE-416 High MongoDb Use After Free Vulnerability (CVE-2026-4148) CVE-2026-4148 CWE-416 CWE-416 High MongoDb Use After Free Vulnerability (CVE-2026-8201) CVE-2026-8201 CWE-416 CWE-416 High MongoDb Use After Free Vulnerability (CVE-2026-11933) CVE-2026-11933 CWE-416 CWE-416 High Moodle 7PK - Security Features Vulnerability (CVE-2015-5267) CVE-2015-5267 High Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322) CVE-2020-14322 CWE-770 CWE-770 High Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25978) CVE-2024-25978 CWE-770 CWE-770 High Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-43438) CVE-2024-43438 CWE-639 CWE-639 High Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3625) CVE-2025-3625 CWE-639 CWE-639 High Moodle Credentials Management Errors Vulnerability (CVE-2009-4304) CVE-2009-4304 High Moodle Credentials Management Errors Vulnerability (CVE-2014-7845) CVE-2014-7845 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5338) CVE-2015-5338 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157) CVE-2016-2157 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-3734) CVE-2016-3734 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-16854) CVE-2018-16854 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10186) CVE-2019-10186 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43559) CVE-2021-43559 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-0335) CVE-2022-0335 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-2986) CVE-2022-2986 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-28335) CVE-2023-28335 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-25982) CVE-2024-25982 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34001) CVE-2024-34001 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34007) CVE-2024-34007 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34008) CVE-2024-34008 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-38276) CVE-2024-38276 CWE-352 CWE-352 High Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-3638) CVE-2025-3638 CWE-352 CWE-352 High Moodle CVE-2018-10891 Vulnerability (CVE-2018-10891) CVE-2018-10891 High Moodle CVE-2020-25698 Vulnerability (CVE-2020-25698) CVE-2020-25698 High Moodle CVE-2023-23923 Vulnerability (CVE-2023-23923) CVE-2023-23923 High Moodle CVE-2024-34009 Vulnerability (CVE-2024-34009) CVE-2024-34009 High Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1155) CVE-2012-1155 CWE-200 CWE-200 High Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-32044) CVE-2025-32044 CWE-200 CWE-200 High Moodle Files or Directories Accessible to External Parties Vulnerability (CVE-2025-26525) CVE-2025-26525 CWE-552 CWE-552 High Moodle Improper Access Control Vulnerability (CVE-2020-25629) CVE-2020-25629 CWE-284 CWE-284 High Moodle Improper Authentication Vulnerability (CVE-2018-1082) CVE-2018-1082 CWE-287 CWE-287 High Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-5674) CVE-2013-5674 CWE-94 CWE-94 High Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3541) CVE-2014-3541 CWE-94 CWE-94 High 1...32333435...179 33 / 179