Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity CakePHP Improper Input Validation Vulnerability (CVE-2016-4793) High Case-Insensitive Routing Bypass in Express.js Application High Certificate is Signed Using a Weak Signature Algorithm High Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-23127) High Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-40662) High Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-27427) High Chamilo Improper Input Validation Vulnerability (CVE-2012-4030) High Chamilo Improper Input Validation Vulnerability (CVE-2021-31933) High Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35413) High Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4221) High Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4222) High Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20329) High Chamilo Improper Privilege Management Vulnerability (CVE-2022-27421) High Chamilo Other Vulnerability (CVE-2023-34962) High Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27426) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-40407) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-42029) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4223) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4224) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4225) High Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4226) High Chart.js Improper Input Validation Vulnerability (CVE-2020-7746) High Check for apache versions up to 1.3.25, 2.0.38 High Cherokee Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20798) High Cherokee Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-20799) High Cherokee NULL Pointer Dereference Vulnerability (CVE-2020-12845) High CherryPy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0252) High Cisco Adaptive Security Appliance (ASA) Path Traversal (CVE-2018-0296) High Cisco Adaptive Security Appliance (ASA) Path Traversal CVE-2020-3452 High Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability High Citrix ADC/Gateway Unauthenticated Remote Code Execution High Citrix Gateway Open Redirect and XSS High Citrix XenMobile Server Path Traversal High CKEditor 4.0.1 cross-site scripting vulnerability High CKEditor Other Vulnerability (CVE-2022-24729) High Claroline Other Vulnerability (CVE-2005-1375) High Claroline Other Vulnerability (CVE-2005-1376) High Claroline Other Vulnerability (CVE-2005-1377) High Claroline Other Vulnerability (CVE-2006-1594) High Claroline Other Vulnerability (CVE-2006-1596) High Claroline Other Vulnerability (CVE-2006-5256) High Claroline Other Vulnerability (CVE-2006-7048) High Client-Side Prototype Pollution High Client Side Template Injection High ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849) High ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643) High Cloud metadata publicly exposed High Cmd hijack vulnerability High Code Evaluation (Apache Struts) S2-046 High Code Execution via WebDav High CodeIgniter 2.1.3 xss_clean() filter bypass High CodeIgniter session decoding vulnerability High CodeIgniter weak encryption key High ColdFusion 8 FCKEditor file upload vulnerability High ColdFusion 9 solr service exposed High ColdFusion Access Control bypass (CVE-2023-29298/CVE-2023-38205) High ColdFusion AMF Deserialization RCE High ColdFusion Arbitrary File Upload High ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360) High ColdFusion directory traversal High ColdFusion FlashGateway Deserialization RCE CVE-2019-7091 High ColdFusion JNDI injection RCE High ColdFusion PMS Arbitrary File Read (CVE-2024-20767) High ColdFusion User-Agent cross-site scripting High Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4269) High Collabtive Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2015-0258) High concrete5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4724) High concrete5 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-13790) High concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11476) High concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24986) High Configuration file disclosure High Configuration file source code disclosure High Confluence Widget Connector SSTI High Consul API publicly exposed High Contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10642) High 1...5678...169 6 / 169
