Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21686) High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114) High Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522) High Atlassian Confluence information disclosure High Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406) High Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2021-43940) High Atlassian Crowd Remote Code Execution High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41305) High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306) High Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307) High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-4319) High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39124) High Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126) High Atlassian Jira CVE-2018-5231 Vulnerability (CVE-2018-5231) High Atlassian Jira CVE-2019-8442 Vulnerability (CVE-2019-8442) High Atlassian Jira CVE-2019-20413 Vulnerability (CVE-2019-20413) High Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898) High Atlassian Jira CVE-2020-14167 Vulnerability (CVE-2020-14167) High Atlassian Jira CVE-2020-14178 Vulnerability (CVE-2020-14178) High Atlassian Jira CVE-2021-39123 Vulnerability (CVE-2021-39123) High Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947) High Atlassian Jira Improper Authentication Vulnerability (CVE-2019-8443) High Atlassian Jira Improper Authentication Vulnerability (CVE-2021-26070) High Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312) High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-18113) High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-15001) High Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43944) High Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39128) High Atlassian Jira insecure REST permissions High Atlassian Jira Insufficient Session Expiration Vulnerability (CVE-2021-39113) High Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399) High Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-6619) High Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20400) High Atlassian Jira Uncontrolled Search Path Element Vulnerability (CVE-2019-20419) High Atlassian OAuth Plugin IconUriServlet SSRF High ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583) High ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2539) High ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10400) High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446) High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12169) High ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12170) High ATutor Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-43498) High Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805) High Authentication bypass via MongoDB operator injection High Auxiliary systems SSRF High axios Improper Input Validation Vulnerability (CVE-2019-10742) High axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338) High axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749) High b2evolution Credentials Management Errors Vulnerability (CVE-2016-9479) High b2evolution Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-5480) High b2evolution Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-28242) High b2evolution Other Vulnerability (CVE-2006-6417) High b2evolution Other Vulnerability (CVE-2007-2358) High b2evolution Other Vulnerability (CVE-2007-2681) High Barracuda networks products multiple directory traversal vulnerabilities High Basic authentication over HTTP High Bazaar repository found High Beego Framework Improper Certificate Validation Vulnerability (CVE-2024-40464) High Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27116) High Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27117) High Beego Framework Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2024-40465) High BigIP iRule Tcl code injection High BillQuick Web Suite SQL injection (CVE-2021-42258) High Blind XSS High Bonita Authorization Bypass (CVE-2022-25237) High BottlePy weak secret key High Broken Object Property Level Authorization (Mass Assignment) High BuddyPress REST API Privilege Escalation High Caddy Web Server Out-of-bounds Read Vulnerability (CVE-2022-34037) High Caddy Web Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487) High CakePHP 1.3.5 / 1.2.8 unserialize() vulnerability High CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8379) High CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-35239) High CakePHP Deserialization of Untrusted Data Vulnerability (CVE-2019-11458) High CakePHP Improper Input Validation Vulnerability (CVE-2010-4335) High 1...4567...169 5 / 169
