Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22462) Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-41117) Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-8595) Medium Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-9029) Medium Grafana Improper Synchronization Vulnerability (CVE-2023-2801) Medium Grafana Incorrect Authorization Vulnerability (CVE-2021-28146) Medium Grafana Incorrect Authorization Vulnerability (CVE-2022-21713) Medium Grafana Incorrect Authorization Vulnerability (CVE-2023-6152) Medium Grafana Insufficiently Protected Credentials Vulnerability (CVE-2019-15635) Medium Grafana Missing Authorization Vulnerability (CVE-2023-2183) Medium Grafana Missing Authorization Vulnerability (CVE-2026-28380) Medium Grafana Other Vulnerability (CVE-2021-28147) Medium Grafana Out-of-bounds Write Vulnerability (CVE-2026-27879) Medium Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375) Medium Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33375) Medium Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33378) Medium Grails database console Medium GraphiQL Explorer/Playground Enabled Medium GraphQL Alias Overloading Allowed: Potential Denial of Service Vulnerability Medium GraphQL Array-based Query Batching Allowed: Potential Batching Attack Vulnerability Medium GraphQL Circular-Query via Introspection Allowed: Potential DoS Vulnerability Medium GraphQL Field Suggestions Enabled Medium GraphQL Introspection Query Enabled Medium GraphQL Non-JSON Mutations over GET: Potential CSRF Vulnerability Medium GraphQL Non-JSON Queries over GET: Potential CSRF Vulnerability Medium GraphQL Non-JSON Queries over POST: Potential CSRF Vulnerability Medium GraphQL Unauthenticated Mutation Detected Medium GraphQL Unhandled Error Leakage Medium Hadoop cluster web interface Medium Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8861) Medium Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33916) Medium Hashicorp Consul API is accessible without authentication Medium Hasura GraphQL API without authentication Medium Hesk Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3743) Medium Hesk Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5287) Medium Hesk Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13897) Medium Hiawatha CVE-2025-57783 Vulnerability (CVE-2025-57783) Medium Highcharts JS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29489) Medium Host header attack Medium Hostile subdomain takeover Medium HTML Injection Medium HTTP Header Injection Medium HTTP header reflected in cached response Medium Httpoxy vulnerability Medium HTTP parameter pollution Medium HTTP response splitting with cloud storage Medium HTTPS connection uses outdated TLS version Medium HTTPS connection with weak key length Medium HTTP Strict Transport Security (HSTS) Policy Not Enabled Medium IBMHttpServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1360) Medium IBMHttpServer Other Vulnerability (CVE-2000-0505) Medium IBMHttpServer Other Vulnerability (CVE-2001-0122) Medium IBMHttpServer Other Vulnerability (CVE-2002-1822) Medium IBMHttpServer Other Vulnerability (CVE-2004-0263) Medium IBMHttpServer Other Vulnerability (CVE-2004-0493) Medium IBMHttpServer Other Vulnerability (CVE-2006-3918) Medium IBM RTC Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-29786) Medium IBM RTC Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-0748) Medium IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4691) Medium IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4697) Medium IBM RTC Cross-site Scripting (XSS) Vulnerability (CVE-2020-4733) Medium IBM RTC CVE-2015-1971 Vulnerability (CVE-2015-1971) Medium IBM RTC CVE-2017-1191 Vulnerability (CVE-2017-1191) Medium IBM RTC CVE-2018-1694 Vulnerability (CVE-2018-1694) Medium IBM RTC CVE-2019-4084 Vulnerability (CVE-2019-4084) Medium IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964) Medium IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-4989) Medium IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-29701) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3092) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-6131) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2865) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2987) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6024) Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9700) Medium 1...22232425...121 23 / 121
