Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Contao Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-37626) High Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-10993) High Contao Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4383) High Contao Improper Privilege Management Vulnerability (CVE-2021-37627) High Contao Insufficient Session Expiration Vulnerability (CVE-2024-30262) High Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19745) High Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-45398) High Coppermine Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3481) High Coppermine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3486) High Core dump file High CouchDB REST API publicly accessible High Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622) High Craft CMS Improper Authentication Vulnerability (CVE-2024-41800) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30130) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30179) High Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-23209) High Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52291) High Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-52293) High Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-9757) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-32679) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36260) High Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-40035) High Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465) High Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2022-37783) High Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814) High Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-29933) High CRMEB SQL Injection (CVE-2024-36837) High Cross-site Scripting High Cross-site Scripting (DOM based) High Cross-site Scripting via File Upload High Cross-site Scripting via Remote File Inclusion High Cross-site scripting vulnerability in Google Web Toolkit High Cross-site scripting vulnerability in Google Web Toolkit (CVE-2012-5920) High Cross site scripting (XSS) in ASP.NET via ResolveUrl High Cross site scripting in HTTP-01 ACME challenge implementation High Cross site scripting via Bootstrap High CubeCart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-38130) High CubeCart Improper Input Validation Vulnerability (CVE-2013-1465) High CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675) High CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4060) High CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1931) High CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4903) High CubeCart Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3904) High Custom Vulnerability Alert High D3.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16044) High Database User Has Admin Privileges High Data Binding Expression Vulnerability in Spring Web Flow High DataTables Prototype Pollution Vulnerability (CVE-2020-28458) High Delve Debugger Unauthorized Access Vulnerability High Deserialization of Untrusted Data (.NET BinaryFormatter Object Deserialization) High Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson High Deserialization of Untrusted Data (Java JSON Deserialization) Genson High Deserialization of Untrusted Data (Java JSON Deserialization) Jackson High Deserialization of Untrusted Data (Java JSON Deserialization) JsonIO High Deserialization of Untrusted Data (Java Object Deserialization) High Deserialization of Untrusted Data (XStream) High Devise weak password High Directory traversal High Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.6.x High Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.8.x High Directory Traversal with spring-cloud-config-server High Django 7PK - Security Features Vulnerability (CVE-2016-7401) High Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975) High Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969) High Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695) High Django CVE-2024-24680 Vulnerability (CVE-2024-24680) High Django CVE-2024-41989 Vulnerability (CVE-2024-41989) High Django CVE-2024-41990 Vulnerability (CVE-2024-41990) High Django CVE-2024-45230 Vulnerability (CVE-2024-45230) High Django Download of Code Without Integrity Check Vulnerability (CVE-2022-36359) High Django Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-45116) High Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-6188) High Django Improper Authentication Vulnerability (CVE-2021-44420) High Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-0698) High 1...6789...169 7 / 169
