Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache Tomcat sample files CWE-538 CWE-538 Medium Apache Tomcat Session Fixation Vulnerability (CVE-2025-55668) CVE-2025-55668 CWE-384 CWE-384 Medium Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2024-54677) CVE-2024-54677 CWE-400 CWE-400 Medium Apache Tomcat Unprotected Transport of Credentials Vulnerability (CVE-2023-28708) CVE-2023-28708 CWE-523 CWE-523 Medium Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-11784) CVE-2018-11784 CWE-601 CWE-601 Medium Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-41080) CVE-2023-41080 CWE-601 CWE-601 Medium Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-25854) CVE-2026-25854 CWE-601 CWE-601 Medium Apache Tomcat Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2021-24122) CVE-2021-24122 CWE-706 CWE-706 Medium Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516) CVE-2019-9516 CWE-770 CWE-770 Medium Apache Traffic Server CVE-2024-38311 Vulnerability (CVE-2024-38311) CVE-2024-38311 Medium Apache Traffic Server CVE-2024-56195 Vulnerability (CVE-2024-56195) CVE-2024-56195 Medium Apache Traffic Server CVE-2024-56196 Vulnerability (CVE-2024-56196) CVE-2024-56196 Medium Apache Traffic Server CVE-2024-56202 Vulnerability (CVE-2024-56202) CVE-2024-56202 Medium Apache Traffic Server Exposure of Resource to Wrong Sphere Vulnerability (CVE-2018-8040) CVE-2018-8040 CWE-668 CWE-668 Medium Apache Traffic Server Improper Certificate Validation Vulnerability (CVE-2026-65325) CVE-2026-65325 CWE-295 CWE-295 Medium Apache Traffic Server Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2022-37392) CVE-2022-37392 CWE-754 CWE-754 Medium Apache Traffic Server Improper Input Validation Vulnerability (CVE-2010-2952) CVE-2010-2952 CWE-20 CWE-20 Medium Apache Traffic Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-40743) CVE-2022-40743 CWE-707 CWE-707 Medium Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0256) CVE-2012-0256 CWE-119 CWE-119 Medium Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-10022) CVE-2014-10022 CWE-119 CWE-119 Medium Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-24033) CVE-2026-24033 Medium Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2018-8004) CVE-2018-8004 CWE-444 CWE-444 Medium Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58156) CVE-2026-58156 CWE-863 CWE-863 Medium Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100) CVE-2026-65100 CWE-696 CWE-696 Medium Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2018-9481) CVE-2018-9481 CWE-190 CWE-190 Medium Apache Traffic Server Integer Overflow or Wraparound Vulnerability (CVE-2026-58152) CVE-2026-58152 CWE-190 CWE-190 Medium Apache Traffic Server Out-of-bounds Read Vulnerability (CVE-2026-58160) CVE-2026-58160 CWE-125 CWE-125 Medium Apache Traffic Server Regular Expression without Anchors Vulnerability (CVE-2026-22068) CVE-2026-22068 CWE-777 CWE-777 Medium Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-33930) CVE-2026-33930 CWE-121 CWE-121 Medium Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58158) CVE-2026-58158 CWE-121 CWE-121 Medium Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2018-8005) CVE-2018-8005 CWE-400 CWE-400 Medium Apache ZooKeeper Unauthorized Access Vulnerability CWE-200 CWE-200 Medium apc.php page found CWE-538 CWE-538 Medium Arbitrary file existence disclosure in Action Pack CVE-2014-7829 CWE-200 CWE-200 Medium Argo CD Information Disclosure (CVE-2024-37152) CVE-2024-37152 CWE-287 CWE-287 Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10321) CVE-2019-10321 CWE-352 CWE-352 Medium Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10324) CVE-2019-10324 CWE-352 CWE-352 Medium Artifactory CVE-2023-42508 Vulnerability (CVE-2023-42508) CVE-2023-42508 Medium Artifactory CVE-2024-3505 Vulnerability (CVE-2024-3505) CVE-2024-3505 Medium Artifactory Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-46687) CVE-2021-46687 CWE-668 CWE-668 Medium Artifactory Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-66018) CVE-2026-66018 CWE-200 CWE-200 Medium Artifactory Improper Authentication Vulnerability (CVE-2023-42662) CVE-2023-42662 CWE-287 CWE-287 Medium Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45721) CVE-2021-45721 CWE-707 CWE-707 Medium Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2247) CVE-2024-2247 CWE-707 CWE-707 Medium Artifactory Incorrect Authorization Vulnerability (CVE-2021-45074) CVE-2021-45074 CWE-863 CWE-863 Medium Artifactory Incorrect Authorization Vulnerability (CVE-2021-45730) CVE-2021-45730 CWE-863 CWE-863 Medium Artifactory Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-41834) CVE-2021-41834 CWE-732 CWE-732 Medium Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164) CVE-2020-2164 CWE-522 CWE-522 Medium Artifactory Missing Authorization Vulnerability (CVE-2019-10322) CVE-2019-10322 CWE-862 CWE-862 Medium Artifactory Missing Authorization Vulnerability (CVE-2019-10323) CVE-2019-10323 CWE-862 CWE-862 Medium Artifactory Missing Authorization Vulnerability (CVE-2026-65922) CVE-2026-65922 CWE-862 CWE-862 Medium Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618) CVE-2026-65618 CWE-918 CWE-918 Medium Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65923) CVE-2026-65923 CWE-918 CWE-918 Medium Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65924) CVE-2026-65924 CWE-918 CWE-918 Medium Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65925) CVE-2026-65925 CWE-918 CWE-918 Medium ASP.NET: Failure To Require SSL For Authentication Cookies CWE-319 CWE-319 Medium ASP.NET application-level tracing enabled CWE-215 CWE-215 Medium ASP.NET ASPX debugging enabled CWE-11 CWE-11 Medium ASP.NET cookieless authentication enabled CWE-598 CWE-598 Medium ASP.NET Cookieless session state enabled CWE-598 CWE-598 Medium ASP.NET cookies accessible from client-side scripts CWE-1004 CWE-1004 Medium ASP.NET Core Development Mode enabled CWE-200 CWE-200 Medium ASP.NET CustomErrors Is Disabled CWE-12 CWE-12 Medium ASP.NET Deny missing from authorization rule on location CWE-288 CWE-288 Medium ASP.NET diagnostic page CWE-200 CWE-200 Medium ASP.NET event validation disabled CWE-345 CWE-345 Medium ASP.NET expired session IDs are not regenerated CWE-384 CWE-384 Medium ASP.NET forms authentication using inadequate protection CWE-345 CWE-345 Medium ASP.NET header checking is disabled in web.config CWE-113 CWE-113 Medium ASP.NET login credentials stored in plain text CWE-256 CWE-256 Medium ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0256) CVE-2017-0256 CWE-20 CWE-20 Medium ASP.NET MVC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4075) CVE-2014-4075 CWE-707 CWE-707 Medium ASP.NET potential HTTP Verb Tampering CWE-288 CWE-288 Medium ASP.NET SignalR Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5042) CVE-2013-5042 CWE-707 CWE-707 Medium ASP.NET ValidateRequest Is Globally Disabled CWE-707 CWE-707 Medium 1...5678...121 6 / 121
