Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0413) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2937) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3508) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4668) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6121) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5645) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5381) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6820) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19206) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12625) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13964) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13965) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15562) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16145) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18670) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18671) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35730) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26925) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44025) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-46144) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5631) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43770) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-47272) Medium Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37383) Medium Roundcube Multiple Cross-site Request Forgery (CSRF) Vulnerabilities (CVE-2014-9587) Medium Roundcube Resource Management Errors Vulnerability (CVE-2011-4078) Medium Roundcube Unspesificed Vulnerability (CVE-2019-10740) Medium Ruby 7PK - Security Features Vulnerability (CVE-2015-3900) Medium Ruby Cryptographic Issues Vulnerability (CVE-2011-2686) Medium Ruby Cryptographic Issues Vulnerability (CVE-2012-5371) Medium Ruby Cryptographic Issues Vulnerability (CVE-2013-4073) Medium Ruby Cryptographic Issues Vulnerability (CVE-2013-4287) Medium Ruby Cryptographic Issues Vulnerability (CVE-2013-4363) Medium Ruby CVE-2019-15845 Vulnerability (CVE-2019-15845) Medium Ruby Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31810) Medium Ruby Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-10933) Medium RubyGems 7PK - Security Features Vulnerability (CVE-2015-3900) Medium RubyGems Cryptographic Issues Vulnerability (CVE-2012-2126) Medium RubyGems Cryptographic Issues Vulnerability (CVE-2013-4287) Medium RubyGems Cryptographic Issues Vulnerability (CVE-2013-4363) Medium RubyGems Improper Input Validation Vulnerability (CVE-2015-4020) Medium RubyGems Improper Input Validation Vulnerability (CVE-2018-1000077) Medium RubyGems Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000079) Medium RubyGems Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000078) Medium RubyGems Other Vulnerability (CVE-2012-2125) Medium Ruby Improper Authentication Vulnerability (CVE-2007-5162) Medium Ruby Improper Authentication Vulnerability (CVE-2007-5770) Medium Ruby Improper Authentication Vulnerability (CVE-2008-3905) Medium Ruby Improper Authentication Vulnerability (CVE-2009-0642) Medium Ruby Improper Input Validation Vulnerability (CVE-2008-3790) Medium Ruby Improper Input Validation Vulnerability (CVE-2009-4492) Medium Ruby Improper Input Validation Vulnerability (CVE-2011-2705) Medium Ruby Improper Input Validation Vulnerability (CVE-2013-1821) Medium Ruby Improper Input Validation Vulnerability (CVE-2015-1855) Medium Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-1891) Medium Ruby Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-1004) Medium Ruby Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2017-17742) Medium Ruby Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0256) Medium Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2011-3624) Medium Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-16254) Medium Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4164) Medium Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4975) Medium Ruby Numeric Errors Vulnerability (CVE-2009-1904) Medium Ruby Numeric Errors Vulnerability (CVE-2011-0188) Medium Ruby on Rails Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2007-6077) Medium Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5189) Medium Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0447) Medium Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8166) Medium Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8167) Medium Ruby on Rails CVE-2015-3227 Vulnerability (CVE-2015-3227) Medium Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477) Medium Ruby on Rails CVE-2022-23633 Vulnerability (CVE-2022-23633) Medium Ruby on Rails CVE-2022-23634 Vulnerability (CVE-2022-23634) Medium Ruby on Rails CVE-2024-26144 Vulnerability (CVE-2024-26144) Medium Ruby on Rails Data Processing Errors Vulnerability (CVE-2014-3916) Medium 1...88899091...107 89 / 107
