Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0274) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1131) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3741) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6170) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1844) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3156) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4369) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4370) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4371) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3094) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0244) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6387) Low Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5021) Low Drupal Other Vulnerability (CVE-2006-2832) Low Drupal Other Vulnerability (CVE-2006-2833) Low Drupal Other Vulnerability (CVE-2006-5477) Low Drupal Other Vulnerability (CVE-2007-0124) Low Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3093) Low Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0827) Low Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0245) Low Drupal Resource Management Errors Vulnerability (CVE-2012-1588) Low e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0997) Low Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0046) Low Envoy Metadata disclosure Low Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767) Low Error messages Low Error page path disclosure Low F5 BIG-IP Cookie Information Disclosure Low FrontPage Identified Low Gitlab user disclosure Low GlassFish CVE-2010-2397 Vulnerability (CVE-2010-2397) Low GlassFish CVE-2012-0081 Vulnerability (CVE-2012-0081) Low GlassFish CVE-2017-3626 Vulnerability (CVE-2017-3626) Low GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239) Low Grafana Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-10452) Low Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-39324) Low Grafana Improper Preservation of Permissions Vulnerability (CVE-2022-36062) Low H2 console publicly accessible Low HTML Attribute Injection Low HTML Form found in redirect page Low IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3050) Low IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-4962) Low IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449) Low IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372) Low IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2947) Low IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1029) Low IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5404) Low IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0122) Low IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0123) Low IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0130) Low IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946) Low IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3045) Low IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150) Low IBM WebSEAL Session Fixation Vulnerability (CVE-2018-1804) Low IIS Path disclosure Low Insecure Frame (External) Low Insecure transition from HTTPS to HTTP in form post Low Internet Information Server returns IP address in HTTP header (Content-Location) Low Internet Information Services Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-1999-0861) Low Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2000-0649) Low Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422) Low Internet Information Services Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1582) Low Internet Information Services Other Vulnerability (CVE-1999-1538) Low Internet Information Services Other Vulnerability (CVE-2000-0167) Low Internet Information Services Other Vulnerability (CVE-2001-0544) Low Java Denial of Service (DoS) Vulnerability (CVE-2018-2952) Low Java Unspesificed Vulnerability (CVE-2018-3136) Low Java Unspesificed Vulnerability (CVE-2018-3139) Low Java Unspesificed Vulnerability (CVE-2018-3150) Low Java Unspesificed Vulnerability (CVE-2018-3157) Low Java Unspesificed Vulnerability (CVE-2019-2422) Low Java Unspesificed Vulnerability (CVE-2019-2426) Low Java Unspesificed Vulnerability (CVE-2019-2766) Low Java Unspesificed Vulnerability (CVE-2019-2786) Low Java Unspesificed Vulnerability (CVE-2019-2818) Low 12345...11 2 / 11
