Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25495) CVE-2019-25495 CWE-138 CWE-138 High osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25496) CVE-2019-25496 CWE-138 CWE-138 High osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25497) CVE-2019-25497 CWE-138 CWE-138 High osCommerce Other Vulnerability (CVE-2004-2638) CVE-2004-2638 High osCommerce Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-18572) CVE-2018-18572 CWE-434 CWE-434 High OSGi Management Console Default Credentials CWE-521 CWE-521 High osTicket CVE-2018-7195 Vulnerability (CVE-2018-7195) CVE-2018-7195 High osTicket Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-14749) CVE-2019-14749 CWE-1236 CWE-1236 High osTicket Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-22200) CVE-2026-22200 CWE-138 CWE-138 High osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-0605) CVE-2010-0605 CWE-138 CWE-138 High osTicket Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-30082) CVE-2023-30082 CWE-1284 CWE-1284 High osTicket Other Vulnerability (CVE-2005-1438) CVE-2005-1438 High osTicket Other Vulnerability (CVE-2005-1439) CVE-2005-1439 High osTicket Other Vulnerability (CVE-2006-5407) CVE-2006-5407 High osTicket Session Fixation Vulnerability (CVE-2022-31888) CVE-2022-31888 CWE-384 CWE-384 High ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-31649) CVE-2022-31649 CWE-668 CWE-668 High ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1499) CVE-2016-1499 CWE-200 CWE-200 High ownCloud Improper Authentication Vulnerability (CVE-2012-4392) CVE-2012-4392 CWE-287 CWE-287 High ownCloud Improper Authentication Vulnerability (CVE-2016-9463) CVE-2016-9463 CWE-287 CWE-287 High ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2044) CVE-2014-2044 CWE-94 CWE-94 High ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2051) CVE-2014-2051 CWE-94 CWE-94 High ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-44537) CVE-2021-44537 CWE-138 CWE-138 High ownCloud Other Vulnerability (CVE-2014-2053) CVE-2014-2053 High ownCloud Other Vulnerability (CVE-2014-2054) CVE-2014-2054 High ownCloud Other Vulnerability (CVE-2014-2055) CVE-2014-2055 High ownCloud Other Vulnerability (CVE-2014-2056) CVE-2014-2056 High ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3834) CVE-2014-3834 CWE-264 CWE-264 High ownCloud Resource Management Errors Vulnerability (CVE-2015-4717) CVE-2015-4717 High ownCloud Resource Management Errors Vulnerability (CVE-2015-6500) CVE-2015-6500 High ownCloud Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-10252) CVE-2020-10252 CWE-918 CWE-918 High Padding oracle attack CWE-209 CWE-209 High Paperclip gem SSRF (Server side request forgery) CVE-2017-0889 CWE-918 CWE-918 High Parallels Plesk SQL injection vulnerability CVE-2012-1557 CWE-89 CWE-89 High Parallels Plesk SSO XML External Entity and Cross-site scripting CWE-611 CWE-611 High Path Traversal in Oracle GlassFish server open source edition CWE-22 CWE-22 High Path traversal via misconfigured NGINX alias CWE-22 CWE-22 High Payara Files or Directories Accessible to External Parties Vulnerability (CVE-2022-45129) CVE-2022-45129 CWE-552 CWE-552 High Payara Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-37422) CVE-2022-37422 CWE-22 CWE-22 High Payara Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-8215) CVE-2024-8215 CWE-707 CWE-707 High Pega Infinity Exposure of Resource to Wrong Sphere Vulnerability (CVE-2019-16387) CVE-2019-16387 CWE-668 CWE-668 High Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8774) CVE-2020-8774 CWE-707 CWE-707 High Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168) CVE-2023-50168 CWE-611 CWE-611 High Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654) CVE-2021-27654 CWE-640 CWE-640 High Pentaho API Auth bypass (CVE-2021-31602) CVE-2021-31602 CWE-863 CWE-863 High Perl Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-12723) CVE-2020-12723 CWE-120 CWE-120 High Perl CVE-2016-6185 Vulnerability (CVE-2016-6185) CVE-2016-6185 High Perl Improper Certificate Validation Vulnerability (CVE-2023-31484) CVE-2023-31484 CWE-295 CWE-295 High Perl Improper Certificate Validation Vulnerability (CVE-2023-31486) CVE-2023-31486 CWE-295 CWE-295 High Perl Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-6329) CVE-2012-6329 CWE-94 CWE-94 High Perl Improper Input Validation Vulnerability (CVE-2015-8853) CVE-2015-8853 CWE-20 CWE-20 High Perl Improper Input Validation Vulnerability (CVE-2016-2381) CVE-2016-2381 CWE-20 CWE-20 High Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12015) CVE-2018-12015 CWE-59 CWE-59 High Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5195) CVE-2012-5195 CWE-119 CWE-119 High Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12837) CVE-2017-12837 CWE-119 CWE-119 High Perl Integer Overflow or Wraparound Vulnerability (CVE-2020-10878) CVE-2020-10878 CWE-190 CWE-190 High Perl Numeric Errors Vulnerability (CVE-2013-7422) CVE-2013-7422 High Perl Out-of-bounds Read Vulnerability (CVE-2018-6798) CVE-2018-6798 CWE-125 CWE-125 High Perl Out-of-bounds Write Vulnerability (CVE-2023-47038) CVE-2023-47038 CWE-787 CWE-787 High Perl Out-of-bounds Write Vulnerability (CVE-2023-47039) CVE-2023-47039 CWE-787 CWE-787 High Perl Out-of-bounds Write Vulnerability (CVE-2024-56406) CVE-2024-56406 CWE-787 CWE-787 High Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238) CVE-2016-1238 CWE-264 CWE-264 High Perl Resource Management Errors Vulnerability (CVE-2013-1667) CVE-2013-1667 High PHP-CGI remote code execution CVE-2012-1823 CVE-2012-2311 CWE-20 CWE-20 High PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5946) CVE-2008-5946 CWE-138 CWE-138 High PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-1803) CVE-2013-1803 CWE-138 CWE-138 High PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7375) CVE-2013-7375 CWE-138 CWE-138 High PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-12461) CVE-2020-12461 CWE-138 CWE-138 High PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14960) CVE-2020-14960 CWE-138 CWE-138 High PHP-Fusion Improper Privilege Management Vulnerability (CVE-2020-24949) CVE-2020-24949 CWE-269 CWE-269 High PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-3172) CVE-2021-3172 CWE-732 CWE-732 High PHP Address Book Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2778) CVE-2013-2778 CWE-352 CWE-352 High PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1911) CVE-2012-1911 CWE-138 CWE-138 High PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0135) CVE-2013-0135 CWE-138 CWE-138 High PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-1748) CVE-2013-1748 CWE-138 CWE-138 High PHP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2017-7963) CVE-2017-7963 CWE-770 CWE-770 High 1...41424344...177 42 / 177
