Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-5247) High Ruby Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-17405) High Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2489) High Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-14033) High Ruby Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-28965) High Ruby Inadequate Encryption Strength Vulnerability (CVE-2021-32066) High Ruby Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-25613) High Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795) High Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-28756) High Ruby Interpretation Conflict Vulnerability (CVE-2021-33621) High Ruby Numeric Errors Vulnerability (CVE-2008-2376) High Ruby Numeric Errors Vulnerability (CVE-2008-2725) High Ruby Numeric Errors Vulnerability (CVE-2008-2726) High Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419) High Ruby on Rails CVE-2006-4112 Vulnerability (CVE-2006-4112) High Ruby on Rails CVE-2019-5418 Vulnerability (CVE-2019-5418) High Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902) High Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2018-16476) High Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2020-8164) High Ruby on Rails directory traversal vulnerability High Ruby on Rails DoubleTap RCE (CVE-2019-5420) High Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885) High Ruby on Rails Improper Access Control Vulnerability (CVE-2016-6317) High Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111) High Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-8163) High Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-0156) High Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-2098) High Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-0752) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4094) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-0448) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2930) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2695) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6496) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3482) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3483) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17916) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17917) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17919) High Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17920) High Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22792) High Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795) High Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2024-26142) High Ruby on Rails Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-33174) High Ruby on Rails Other Vulnerability (CVE-2013-0333) High Ruby on Rails Other Vulnerability (CVE-2021-22904) High Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-0449) High Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3514) High Ruby on Rails Resource Management Errors Vulnerability (CVE-2015-7581) High Ruby on Rails Resource Management Errors Vulnerability (CVE-2016-0751) High Ruby on Rails SQL injection High Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2021-22880) High Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2026-33176) High Ruby on Rails Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-8162) High Ruby on Rails weak/known secret token High Ruby Other Vulnerability (CVE-2021-41817) High Ruby Out-of-bounds Read Vulnerability (CVE-2022-28739) High Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3655) High Ruby Resource Management Errors Vulnerability (CVE-2008-2664) High Ruby Resource Management Errors Vulnerability (CVE-2008-3656) High Ruby Resource Management Errors Vulnerability (CVE-2008-4310) High Ruby Resource Management Errors Vulnerability (CVE-2014-6438) High Ruby Uncontrolled Resource Consumption Vulnerability (CVE-2018-8777) High Ruby Use of Externally-Controlled Format String Vulnerability (CVE-2018-8778) High Rukovoditel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-11818) High Rukovoditel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-30224) High Rukovoditel Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53913) High Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45020) High Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34469) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13587) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13588) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13589) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13590) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13591) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13592) High Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43288) High 1...52535455...179 53 / 179
