Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache Axis2 web services enumeration Low Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-4415) Low Apache HTTP Server Improper Input Validation Vulnerability (CVE-2012-0021) Low Apache HTTP Server Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2001-0131) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1581) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6421) Low Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687) Low Apache HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2008-0456) Low Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2009-3094) Low Apache HTTP Server Other Vulnerability (CVE-2002-1233) Low Apache HTTP Server Other Vulnerability (CVE-2004-1387) Low Apache HTTP Server Other Vulnerability (CVE-2004-1834) Low Apache HTTP Server Other Vulnerability (CVE-2007-1742) Low Apache HTTP Server Session Fixation Vulnerability (CVE-2001-1534) Low Apache mod_negotiation filename bruteforcing Low Apache Solr endpoint Low Apache stronghold-info enabled Low Apache stronghold-status enabled Low Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-43980) Low Apache Tomcat CVE-2026-24733 Vulnerability (CVE-2026-24733) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-3164) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4308) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1157) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2204) Low Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2071) Low Apache Tomcat hello.jsp XSS Low Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-5461) Low Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-1358) Low Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-2450) Low Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514) Low Apache Tomcat Other Vulnerability (CVE-2007-1858) Low Apache Tomcat Other Vulnerability (CVE-2010-3718) Low Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0346) Low Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534) Low Arbitrary File Read on Nuxt.js Development Server Low Artifactory Improper Authentication Vulnerability (CVE-2026-42018) Low Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270) Low ASP.NET debugging enabled Low ASP.NET error message Low ASP.NET path disclosure Low ASP.NET ViewStateUserKey Is Not Set Low Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071) Low Atlassian Jira CVE-2021-26076 Vulnerability (CVE-2021-26076) Low Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8481) Low Atlassian Jira Manage Filters information disclosure Low Atlassian Jira Other Vulnerability (CVE-2006-3338) Low ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0971) Low ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2091) Low axios Improper Encoding or Escaping of Output Vulnerability (CVE-2026-42040) Low Broken Link Hijacking Low Caddy Web Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19148) Low Caddy Web Server Partial String Comparison Vulnerability (CVE-2026-45692) Low Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-39061) Low Cherokee Cryptographic Issues Vulnerability (CVE-2011-2190) Low Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4753) Low Clickjacking: CSP frame-ancestors missing Low ColdFusion administrator login page publicly available Low ColdFusion path disclosures Low ColdFusion RDS Service enabled Low Composer installed.json publicly accessible Low concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3111) Low Cookies Not Marked as HttpOnly Low Cookies Not Marked as Secure Low Cookies with missing, inconsistent or contradictory properties Low Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2015-3921) Low Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1613) Low CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496) Low Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666) Low Django Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-25674) Low Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513) Low Django Missing Authorization Vulnerability (CVE-2026-4292) Low Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0483) Low Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-35193) Low Documentation files Low 12345...13 1 / 13
