Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50097) CVE-2025-50097 CWE-400 CWE-400 Medium MySQL Use After Free Vulnerability (CVE-2019-7317) CVE-2019-7317 CWE-416 CWE-416 Medium MySQL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0735) CVE-2018-0735 CWE-327 CWE-327 Medium MySQL Use of Externally-Controlled Format String Vulnerability (CVE-2006-3469) CVE-2006-3469 CWE-134 CWE-134 Medium MySQL Use of Externally-Controlled Format String Vulnerability (CVE-2008-3963) CVE-2008-3963 CWE-134 CWE-134 Medium MySQL utf8 4-byte truncation CWE-176 CWE-176 Medium Next.js Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2026-44572) CVE-2026-44572 CWE-349 CWE-349 Medium Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-56332) CVE-2024-56332 CWE-770 CWE-770 Medium Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577) CVE-2026-44577 CWE-770 CWE-770 Medium Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646) CVE-2026-64646 CWE-770 CWE-770 Medium Next.js Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27978) CVE-2026-27978 CWE-352 CWE-352 Medium Next.js CVE-2025-55183 Vulnerability (CVE-2025-55183) CVE-2025-55183 Medium Next.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-30218) CVE-2025-30218 CWE-200 CWE-200 Medium Next.js image Blind SSRF CWE-918 CWE-918 Medium Next.js Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2022-36046) CVE-2022-36046 CWE-754 CWE-754 Medium Next.js Improper Encoding or Escaping of Output Vulnerability (CVE-2026-64647) CVE-2026-64647 CWE-116 CWE-116 Medium Next.js Improper Input Validation Vulnerability (CVE-2025-55173) CVE-2025-55173 CWE-20 CWE-20 Medium Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284) CVE-2020-5284 CWE-22 CWE-22 Medium Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18282) CVE-2018-18282 CWE-707 CWE-707 Medium Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39178) CVE-2021-39178 CWE-707 CWE-707 Medium Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580) CVE-2026-44580 CWE-707 CWE-707 Medium Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44581) CVE-2026-44581 CWE-707 CWE-707 Medium Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-29057) CVE-2026-29057 Medium Next.js Inefficient Algorithmic Complexity Vulnerability (CVE-2026-64644) CVE-2026-64644 CWE-407 CWE-407 Medium Next.js Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-64643) CVE-2026-64643 CWE-201 CWE-201 Medium Next.js Interpretation Conflict Vulnerability (CVE-2026-44576) CVE-2026-44576 CWE-436 CWE-436 Medium Next.js Missing Origin Validation in WebSockets Vulnerability (CVE-2025-48068) CVE-2025-48068 Medium Next.js Missing Origin Validation in WebSockets Vulnerability (CVE-2026-27977) CVE-2026-27977 Medium Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-64649) CVE-2026-64649 CWE-918 CWE-918 Medium Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15242) CVE-2020-15242 CWE-601 CWE-601 Medium Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-37699) CVE-2021-37699 CWE-601 CWE-601 Medium Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-64645) CVE-2026-64645 CWE-601 CWE-601 Medium Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2025-57752) CVE-2025-57752 CWE-524 CWE-524 Medium Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648) CVE-2026-64648 CWE-524 CWE-524 Medium Nexus Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-77121) CVE-2026-77121 CWE-770 CWE-770 Medium Nexus Incomplete List of Disallowed Inputs Vulnerability (CVE-2026-77124) CVE-2026-77124 CWE-184 CWE-184 Medium Nexus Incorrect Authorization Vulnerability (CVE-2026-77122) CVE-2026-77122 CWE-863 CWE-863 Medium Nexus Incorrect Authorization Vulnerability (CVE-2026-77125) CVE-2026-77125 CWE-863 CWE-863 Medium Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123) CVE-2026-77123 CWE-201 CWE-201 Medium Nexus Repository Manager Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11415) CVE-2020-11415 CWE-312 CWE-312 Medium Nexus Repository Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-42568) CVE-2021-42568 CWE-200 CWE-200 Medium Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-30635) CVE-2021-30635 CWE-22 CWE-22 Medium Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-34553) CVE-2021-34553 CWE-22 CWE-22 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5306) CVE-2018-5306 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5307) CVE-2018-5307 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-12100) CVE-2018-12100 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-16619) CVE-2018-16619 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11629) CVE-2019-11629 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14469) CVE-2019-14469 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29159) CVE-2021-29159 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37152) CVE-2021-37152 CWE-707 CWE-707 Medium Nexus Repository Manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-43961) CVE-2021-43961 CWE-138 CWE-138 Medium Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-29436) CVE-2020-29436 CWE-611 CWE-611 Medium Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2026-10741) CVE-2026-10741 CWE-863 CWE-863 Medium Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-43293) CVE-2021-43293 CWE-918 CWE-918 Medium Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27907) CVE-2022-27907 CWE-918 CWE-918 Medium Nexus Repository Manager Use of Hard-coded Credentials Vulnerability (CVE-2024-5764) CVE-2024-5764 CWE-798 CWE-798 Medium Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516) CVE-2019-9516 CWE-770 CWE-770 Medium Nginx Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2012-2089) CVE-2012-2089 CWE-120 CWE-120 Medium Nginx CVE-2009-4487 Vulnerability (CVE-2009-4487) CVE-2009-4487 Medium Nginx CVE-2010-4180 Vulnerability (CVE-2010-4180) CVE-2010-4180 Medium Nginx CVE-2011-4963 Vulnerability (CVE-2011-4963) CVE-2011-4963 Medium Nginx CVE-2013-2070 Vulnerability (CVE-2013-2070) CVE-2013-2070 Medium Nginx Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2263) CVE-2010-2263 CWE-200 CWE-200 Medium Nginx Improper Certificate Validation Vulnerability (CVE-2009-3555) CVE-2009-3555 CWE-295 CWE-295 Medium Nginx Improper Input Validation Vulnerability (CVE-2011-4968) CVE-2011-4968 CWE-20 CWE-20 Medium Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-3898) CVE-2009-3898 CWE-22 CWE-22 Medium Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-2266) CVE-2010-2266 CWE-22 CWE-22 Medium Nginx Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2014-3556) CVE-2014-3556 CWE-138 CWE-138 Medium Nginx Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3896) CVE-2009-3896 CWE-119 CWE-119 Medium Nginx Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20372) CVE-2019-20372 CWE-444 CWE-444 Medium Nginx Insufficient Session Expiration Vulnerability (CVE-2014-3616) CVE-2014-3616 CWE-613 CWE-613 Medium Nginx Insufficient Session Expiration Vulnerability (CVE-2025-23419) CVE-2025-23419 CWE-613 CWE-613 Medium Nginx Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-16845) CVE-2018-16845 CWE-835 CWE-835 Medium Nginx Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-1695) CVE-2025-1695 CWE-835 CWE-835 Medium 1...70717273...121 71 / 121
