Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity e107 Other Vulnerability (CVE-2006-0682) Medium e107 Other Vulnerability (CVE-2006-2590) Medium e107 Other Vulnerability (CVE-2006-2591) Medium e107 Other Vulnerability (CVE-2006-3259) Medium e107 Other Vulnerability (CVE-2006-4757) Medium e107 Other Vulnerability (CVE-2006-4794) Medium e107 Other Vulnerability (CVE-2007-3429) Medium e107 Other Vulnerability (CVE-2010-0996) Medium e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2020) Medium easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5212) Medium easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1403) Medium easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27739) Medium Elgg Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3964) Medium Elgg Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3733) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2935) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6561) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0234) Medium Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4072) Medium Elgg Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6562) Medium Elgg Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6563) Medium Elgg URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-11016) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4170) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0013) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0014) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1866) Medium Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7565) Medium Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27492) Medium Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21656) Medium Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21657) Medium Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2024-45808) Medium Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-35944) Medium Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660) Medium Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2022-29224) Medium Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104) Medium Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364) Medium Envoy Proxy Uncontrolled Recursion Vulnerability (CVE-2022-23606) Medium Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2024-23323) Medium Envoy Proxy Use After Free Vulnerability (CVE-2023-35942) Medium Envoy Proxy Use After Free Vulnerability (CVE-2024-34362) Medium EspoCRM Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-38846) Medium EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38845) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7987) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17301) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17302) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-13643) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14329) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14330) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14331) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14349) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14350) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14546) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14547) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14548) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14549) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14550) Medium EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3539) Medium EspoCRM Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7986) Medium EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-46736) Medium Express cookie-session weak secret key Medium Express Development Mode enabled Medium Ext JS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-8046) Medium Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-5130) Medium Family Connections Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-2901) Medium Family Connections Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2010) Medium fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1494) Medium FCKeditor arbitrary file upload Medium File tampering Medium Firebase database accessible without authentication Medium Flask weak secret key Medium FluxBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35240) Medium FluxBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43677) Medium FluxBB Other Vulnerability (CVE-2014-10030) Medium Frontaccounting Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3740) Medium Frontaccounting Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5148) Medium Frontaccounting Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-21244) Medium 1...17181920...107 18 / 107
