Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690) High Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2022-2053) High Unprotected phpMyAdmin interface High Unrestricted access to Caddy API interface High Unrestricted access to Haproxy Data Plane API High Unrestricted access to Kong Gateway API High Unrestricted access to NGINX+ API interface (read write) High Unrestricted access to Odoo DB manager High Unrestricted File Upload High Unrestricted file upload vulnerability in ofc_upload_image.php High Unsafe use of Reflection High Uploadify arbitrary file upload High User controllable script source High uWSGI Path Traversal vulnerability High uWSGI Unauthorized Access Vulnerability High Vanilla Forums Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000432) High Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528) High Vanilla Forums Deserialization of Untrusted Data Vulnerability (CVE-2018-19499) High Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3613) High Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10073) High Vanilla Forums Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3527) High Varnish Cache Integer Overflow or Wraparound Vulnerability (CVE-2017-12425) High Varnish Cache Other Vulnerability (CVE-2013-4090) High Varnish Cache Other Vulnerability (CVE-2015-8852) High Varnish Cache Reachable Assertion Vulnerability (CVE-2019-15892) High vBSEO 3.6.0 PHP code injection High vBulletin 4 (up to 4.1.2) search.php SQL injection High vBulletin 5 CONNECT remote code execution High vBulletin 5.1.2 SQL injection High vBulletin 5.6.1 nodeId SQL injection High vBulletin 5.x 0day pre-auth RCE High vBulletin customer number disclosure High vBulletin PHP object injection vulnerability High vBulletin Pre-Auth RCE Vulnerability High vBulletin routestring Local File Inclusion High Vertical Broken Function Level Authorization (BFLA) High Vertical IDOR/BOLA (Broken Object Level Authorization) High Virtual Host locations misconfiguration High VirtueMart access control bypass High Vite Arbitrary File Read (CVE-2025-30208, CVE-2025-31125) High VMware directory traversal and privilege escalation vulnerabilities High VMware Horizon Log4Shell RCE High VMware vCenter Log4Shell RCE High VMware vCenter Server Unauthorized Remote Code Execution High VMware vCenter vcavbootstrap Arbitrary File Read High VMware vRealize Operations Server Side Request Forgery (SSRF) vulnerability High VMware Workspace ONE Access SSTI (CVE-2022-22954) High Vulnerabilities in SharePoint could allow elevation of privilege High Vulnerable package dependencies [high] High Vulnerable project dependencies High W3 Total Cache CVE-2019-6715 Vulnerability (CVE-2019-6715) High Weak password High Weak Secret is Used to Sign JWT High Weak WordPress security key High web.xml configuration file disclosure High webadmin.php script High Web application default/weak credentials High Web Cache Deception High Web Cache Poisoning High Web Cache Poisoning through HTTP/2 pseudo-headers High Web Cache Poisoning via Fat GET Request High Web Cache Poisoning via Host Header High Web Cache Poisoning via JSONP and UTM_ parameter High Web Cache Poisoning via POST Request High Web Cache Poisoning via semicolon query separator High WebDAV Directory Has Write Permissions High WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19434) High WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19435) High WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-19436) High WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-7755) High WeBid Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000882) High WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7116) High WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7119) High WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-1000867) High WeBid Other Vulnerability (CVE-2014-5114) High 1...51525354...169 52 / 169
