Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache version older than 1.3.37 Medium Apache version older than 1.3.39 Medium Apache version older than 1.3.41 Medium Apache ZooKeeper Unauthorized Access Vulnerability Medium apc.php page found Medium Arbitrary file existence disclosure in Action Pack Medium Argo CD Information Disclosure (CVE-2024-37152) Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10321) Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10324) Medium Artifactory CVE-2023-42508 Vulnerability (CVE-2023-42508) Medium Artifactory CVE-2024-3505 Vulnerability (CVE-2024-3505) Medium Artifactory Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-46687) Medium Artifactory Improper Authentication Vulnerability (CVE-2023-42662) Medium Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45721) Medium Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2247) Medium Artifactory Incorrect Authorization Vulnerability (CVE-2021-45074) Medium Artifactory Incorrect Authorization Vulnerability (CVE-2021-45730) Medium Artifactory Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-41834) Medium Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164) Medium Artifactory Missing Authorization Vulnerability (CVE-2019-10322) Medium Artifactory Missing Authorization Vulnerability (CVE-2019-10323) Medium ASP.NET: Failure To Require SSL For Authentication Cookies Medium ASP.NET application-level tracing enabled Medium ASP.NET ASPX debugging enabled Medium ASP.NET cookieless authentication enabled Medium ASP.NET Cookieless session state enabled Medium ASP.NET cookies accessible from client-side scripts Medium ASP.NET Core Development Mode enabled Medium ASP.NET CustomErrors Is Disabled Medium ASP.NET Deny missing from authorization rule on location Medium ASP.NET diagnostic page Medium ASP.NET event validation disabled Medium ASP.NET expired session IDs are not regenerated Medium ASP.NET forms authentication using inadequate protection Medium ASP.NET header checking is disabled in web.config Medium ASP.NET login credentials stored in plain text Medium ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0256) Medium ASP.NET MVC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4075) Medium ASP.NET potential HTTP Verb Tampering Medium ASP.NET SignalR Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5042) Medium ASP.NET ValidateRequest Is Globally Disabled Medium ASP.NET viewstate encryption disabled Medium ASP.NET WCF metadata enabled for behavior Medium ASP.NET WCF replay attacks are not detected Medium ASP.NET WCF service include exception details Medium Atlassian Confluence Access Restriction Bypass Medium Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342) Medium Atlassian Confluence CVE-2020-29448 Vulnerability (CVE-2020-29448) Medium Atlassian Confluence CVE-2023-22503 Vulnerability (CVE-2023-22503) Medium Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8399) Medium Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20237) Medium Atlassian Confluence Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2019-15006) Medium Atlassian Confluence Improper Input Validation Vulnerability (CVE-2018-13389) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8398) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4317) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6283) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-16856) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18083) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18084) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18085) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18086) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20239) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14175) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29444) Medium Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36290) Medium Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-4027) Medium Atlassian Confluence Incorrect Default Permissions Vulnerability (CVE-2017-9505) Medium Atlassian Confluence Missing Authorization Vulnerability (CVE-2019-15005) Medium Atlassian Confluence Missing Authorization Vulnerability (CVE-2021-26085) Medium Atlassian Confluence Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928) Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-29445) Medium Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-26072) Medium Atlassian Confluence Stored Cross Site Scripting Medium Atlassian Confluence Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-29450) Medium 1...5678...107 6 / 107
