Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity AngularJS client-side template injection High Apache Tomcat JK connector security bypass High Authentication bypass via MongoDB operator injection High Client-Side Prototype Pollution High Cross-site Scripting via File Upload High Database User Has Admin Privileges High Deserialization of Untrusted Data (.NET BinaryFormatter Object Deserialization) High Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson High Deserialization of Untrusted Data (Java JSON Deserialization) Genson High Deserialization of Untrusted Data (Java JSON Deserialization) Jackson High Deserialization of Untrusted Data (Java JSON Deserialization) JsonIO High Deserialization of Untrusted Data (Java Object Deserialization) High Deserialization of Untrusted Data (XStream) High DotNetNuke multiple vulnerabilities High Email Header Injection High Email Header Injection (AcuSensor) High Email injection High File tampering Medium File Upload Functionality Detected Informational File upload XSS (Java applet) High Host header attack Medium HTML Attribute Injection Low HTML Form found in redirect page Low HTML form susceptible to spam Medium HTML Injection Medium Http redirect security bypass High Insecure usage of Version 1 UUID/GUID Medium Ivanti CSA Path Traversal (CVE-2024-8963/CVE-2024-8190) Critical Java Debug Wire Protocol remote code execution High Java object deserialization of user-supplied data Medium JIRA Security Advisory 2013-02-21 High JSF ViewState client side storage Medium JSP authentication bypass High MediaWiki chunked uploads security issue High MongoDB $where operator JavaScript injection High MongoDB injection High Multiple vulnerabilities reported in Parallels Plesk Sitebuilder High node-serialize Insecure Deserialization High Oracle E-Business Suite Frame Injection (CVE-2017-3528) Medium PHP curl_exec() url is controlled by user Medium PHP mail function ASCII control character header spoofing vulnerability Medium PHP object deserialization of user-supplied data Medium PHP preg_replace used on user input Medium PHP super-globals-overwrite Medium PHP unserialize() used on user input Medium Prototype pollution High Python object deserialization of user-supplied data Medium Python pickle serialization High Rails mass assignment High Ruby on Rails CookieStore session cookie persistence Low Same origin method execution (SOME) Medium Server-side JavaScript injection High TCPDF arbitrary file read High Uncontrolled format string High Unprotected phpMyAdmin interface High Unrestricted access to Haproxy Data Plane API High Unrestricted File Upload High Unrestricted file upload vulnerability in ofc_upload_image.php High Unsafe use of Reflection High URL rewrite vulnerability Medium User-controlled form action Medium User controllable charset Medium VirtueMart access control bypass High webadmin.php script High Web Cache Deception High WordPress MailPoet Newsletters (wysija-newsletters) unauthenticated file upload High WordPress plugin All in One SEO Pack privilege escalation vulnerabilities High WordPress plugin Custom Contact Forms critical vulnerability High WordPress plugin WPtouch insecure nonce generation High WordPress XML-RPC authentication brute force Medium XML entity injection High XML external entity injection High XML external entity injection (variant) High XML external entity injection and XML injection High XML External Entity Injection via external file High XML external entity injection via File Upload High XSLT injection High
