Vulnerability Name CVE Severity
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3629)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5097)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5098)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5100)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1606)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3528)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6145)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6147)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6148)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7074)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7078)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3943)
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5956)
TYPO3 Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-26229)
TYPO3 Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-11063)
TYPO3 Other Vulnerability (CVE-2006-5069)
Typo3 sensitive files
Unfiltered header injection in Apache 1.3.34/2.0.57/2.2.1
Unrestricted access to a monitoring system
Unrestricted access to ImageResizer Diagnotics plugin
Unrestricted access to NGINX+ Status module
Unrestricted access to Prometheus
Unrestricted access to Prometheus Metrics
Vanilla Forums Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-9889)
Vanilla Forums Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4954)
Varnish Cache Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0345)
Version Disclosure (ASP.NET)
Version Disclosure (ASP.NET MVC)
Version Disclosure (IIS)
Version Disclosure (PHP)
ViewsState is not Encrypted
Vulnerable package dependencies [low]
WebLogic CVE-2016-0688 Vulnerability (CVE-2016-0688)
WebLogic CVE-2021-1996 Vulnerability (CVE-2021-1996)
WebLogic Improper Certificate Validation Vulnerability (CVE-2020-9488)
WebLogic Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-8908)
Web Server Cache Poisoning (CMS Made Simple) v1.x
Werkzeug WSGI CVE-2023-23934 Vulnerability (CVE-2023-23934)
Whoops error handler component detected
WordPress admin accessible without HTTP authentication
WordPress Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2020-4050)
WordPress default administrator account
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5868)
WordPress full path disclosure
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-1732)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5710)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3891)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0700)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0287)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5739)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5240)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5622)
WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4049)
WordPress Other Vulnerability (CVE-2006-0733)
WordPress Other Vulnerability (CVE-2007-4153)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5297)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4422)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4340)
WordPress REST API User Enumeration
XWiki CVE-2007-4898 Vulnerability (CVE-2007-4898)
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43841)
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1413)
Zope Web Application Server Other Vulnerability (CVE-2006-3458)
[Possible] Internal IP Address Disclosure