Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache 2.x version older than 2.2.10 Low Apache Axis2 web services enumeration Low Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-4415) Low Apache HTTP Server Improper Input Validation Vulnerability (CVE-2012-0021) Low Apache HTTP Server Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2001-0131) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1581) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6421) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687) Low Apache HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2008-0456) Low Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2009-3094) Low Apache HTTP Server Other Vulnerability (CVE-2002-1233) Low Apache HTTP Server Other Vulnerability (CVE-2004-1387) Low Apache HTTP Server Other Vulnerability (CVE-2004-1834) Low Apache HTTP Server Other Vulnerability (CVE-2007-1742) Low Apache HTTP Server Session Fixation Vulnerability (CVE-2001-1534) Low Apache mod_negotiation filename bruteforcing Low Apache Solr endpoint Low Apache stronghold-info enabled Low Apache stronghold-status enabled Low Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-43980) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-3164) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4308) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1157) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2204) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2071) Low Apache Tomcat hello.jsp XSS Low Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-5461) Low Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-1358) Low Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-2450) Low Apache Tomcat Other Vulnerability (CVE-2007-1858) Low Apache Tomcat Other Vulnerability (CVE-2010-3718) Low Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0346) Low Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534) Low Apache Tomcat version older than 6.0.6 Low Apache version up to 1.3.33 htpasswd local overflow Low Arbitrary File Read on Nuxt.js Development Server Low Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270) Low ASP.NET debugging enabled Low ASP.NET error message Low ASP.NET path disclosure Low ASP.NET ViewStateUserKey Is Not Set Low Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071) Low Atlassian Jira CVE-2021-26076 Vulnerability (CVE-2021-26076) Low Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8481) Low Atlassian Jira Manage Filters information disclosure Low Atlassian Jira Other Vulnerability (CVE-2006-3338) Low ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0971) Low ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2091) Low Broken Link Hijacking Low Caddy Web Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19148) Low Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-39061) Low Cherokee Cryptographic Issues Vulnerability (CVE-2011-2190) Low Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4753) Low Clickjacking: CSP frame-ancestors missing Low ColdFusion administrator login page publicly available Low ColdFusion path disclosures Low ColdFusion RDS Service enabled Low Composer installed.json publicly accessible Low concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3111) Low Cookies Not Marked as HttpOnly Low Cookies Not Marked as Secure Low Cookies with missing, inconsistent or contradictory properties Low Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2015-3921) Low Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1613) Low Cross site scripting (requiring unencoded quote) Low Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513) Low Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0483) Low Documentation files Low Dotclear Other Vulnerability (CVE-2007-3688) Low Dotclear Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7903) Low Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-3972) Low Drupal Core Open Redirect Low Drupal Improper Access Control Vulnerability (CVE-2015-2559) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5621) Low 12345...11 1 / 11
