Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity ActiveMQ OpenWire RCE (CVE-2023-46604) Critical Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102) Critical Adobe Experience Manager Misconfiguration High Apache HTTP Server mod_proxy SSRF (CVE-2021-40438) High Apache Log4j socket receiver deserialization vulnerability Critical Apache OFBiz Log4Shell RCE High Apache OFBiz SOAPService Deserialization RCE High Apache OFBiz SSRF (CVE-2023-50968) High Apache OFBiz SSRF (CVE-2024-45507) Critical Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High Apache REST RCE CVE-2018-11770 High Apache Shiro Deserialization RCE High Apache Solr Deserialization of untrusted data via jmx.serviceUrl High Apache Solr Log4Shell RCE High Apache Solr Parameter Injection Medium Apache Solr SSRF CVE-2017-3164 Medium Apache Struts2 remote code execution vulnerability Critical Apache Struts2 Remote Command Execution (S2-052) High Apache Struts2 Remote Command Execution (S2-053) Critical Apache Unomi MVEL RCE (CVE-2020-13942) High Appwrite favicon SSRF (CVE-2023-27159) High Argument Injection High Atlassian OAuth Plugin IconUriServlet SSRF High Auxiliary systems SSRF High Code Evaluation (Perl) Critical Code Evaluation (Python) Critical Code Evaluation (Ruby) Critical ColdFusion AMF Deserialization RCE High ColdFusion FlashGateway Deserialization RCE CVE-2019-7091 High ColdFusion JNDI injection RCE High ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204) Critical Cross-site Scripting via Remote File Inclusion High Data Binding Expression Vulnerability in Spring Web Flow High Deserialization of Untrusted Data (.NET BinaryFormatter Object Deserialization) High Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson High Deserialization of Untrusted Data (Java JSON Deserialization) Genson High Deserialization of Untrusted Data (Java JSON Deserialization) Jackson High Deserialization of Untrusted Data (Java JSON Deserialization) JsonIO High Deserialization of Untrusted Data (Java Object Deserialization) High Deserialization of Untrusted Data (XStream) High DNN (DotNetNuke) CMS Cookie Deserialization RCE CVE-2017-9822 High Edge Side Include injection High Email Header Injection High Ext JS arbitrary file read High Flex BlazeDS AMF Deserialization RCE High ForgeRock AM / OpenAM Deserialization RCE (CVE-2021-35464) High GeoServer SSRF (CVE-2021-40822) High GeoServer WMS SSRF (CVE-2023-43795) High GhostScript RCE (Remote Code Execution) Critical Gitlab CI Lint SSRF Medium GitLab ExifTool RCE (CVE-2021-22205) High Hasura GraphQL API without authentication Medium HTTP/2 pseudo-header server side request forgery High Httpoxy vulnerability Medium IBM ODM JNDI injection (CVE-2024-22319) Critical IBM WebSphere RCE Java Deserialization Vulnerability High ImageMagick remote code execution High imgproxy SSRF (CVE-2023-30019) Medium Ivanti EPM SQLi RCE (CVE-2024-29824) High Ivanti Sentry Authentication Bypass (CVE-2023-38035) Critical JavaMelody XML External Entity (XXE) vulnerability High Jboss Application Server HTTPServerILServlet.java remote code execution High JBoss InvokerTransformer Remote Code Execution High Jira Unauthorized SSRF via REST API High Jolokia XML External Entity (XXE) vulnerability High Kentico CMS Deserialization RCE High Keycloak request_uri SSRF (CVE-2020-10770) Medium Liferay TunnelServlet Deserialization Remote Code Execution High Liferay XMLRPC Blind SSRF Medium ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189) High MobileIron Log4Shell RCE High Next.js image Blind SSRF Medium OpenCms Chemistry Solr XML External Entity (XXE) vulnerability (CVE-2023-42346) High OpenCms Chemistry XML External Entity (XXE) vulnerability (CVE-2023-42344) High OpenCms Solr XML External Entity (XXE) vulnerability High Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587) High Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445) High Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950 High Oracle Business Intelligence Convert XXE CVE-2019-2767 High Oracle Business Intelligence ReportTemplateService XXE (CVE-2021-2400) High Oracle Business Intelligence ReportTemplateService XXE CVE-2019-2616 High Oracle E-Business Suite Deserialization RCE High Oracle E-Business Suite SQL injection (CVE-2017-3549) High Oracle E-Business Suite SSRF (CVE-2017-10246) High Oracle E-Business Suite SSRF (CVE-2018-3167) Medium Oracle Reports rwservlet vulnerabilities High Oracle Reports Services RWServlet environment variables disclosure Low Oracle Weblogic Async Component Deserialization RCE CVE-2019-2725 High Oracle WebLogic Remote Code Execution via IIOP High Oracle WebLogic Remote Code Execution via T3 High Oracle Weblogic T3 XXE (CVE-2019-2647) High Oracle Weblogic T3 XXE (CVE-2019-2888) High Oracle Weblogic WLS-WSAT Component Deserialization RCE High PaloAlto Networks Expedition RCE (CVE-2024-9463) Critical Paperclip gem SSRF (Server side request forgery) High RCE in Ivanti Connect Secure and Policy Secure (CVE-2024-21887) Critical RCE in SQL Server Reporting Services (SSRS) High RCE with Spring Data Commons High Remote code execution in bootstrap-sass 3.2.0.3 High Remote code execution of user-provided local names in Rails High Reverse proxy bypass Medium Reverse proxy misrouting High Reverse proxy misrouting through HTTP/2 pseudo-headers (SSRF) Medium Ruby on Rails DoubleTap RCE (CVE-2019-5420) High SAML Consumer Service External Dereference SSRF Medium SAML Consumer Service XML entity injection (XXE) High SAML Consumer Service XSLT injection High SAP BO BIP SSRF (CVE-2020-6308) Medium SAP BO BIP XXE (CVE-2022-28213) High SAP Hybris Deserialization RCE High SAP IGS XXE (CVE-2018-2392, CVE-2018-2393) High SAP NW DI SSRF vulnerability (CVE-2021-33690) High Sitecore XP Deserialization RCE (CVE-2021-42237) High Skype for Business SSRF (CVE-2023-41763) High SOAP WS-Addressing SSRF Medium Sonicwall SMA 100 Unintended proxy (CVE-2021-20042) Medium SSRF in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-21893) High SSRF in Server-Side Rendering High TorchServe Management API SSRF (CVE-2023-43654) Critical Ubiquiti Unifi Log4Shell RCE High Unauthenticated Remote Code Execution via JSONWS in Liferay 7.2.0 CE GA1 High uWSGI Unauthorized Access Vulnerability High VMware Horizon Log4Shell RCE High VMware vCenter Log4Shell RCE High WS_FTP AHT Deserialization RCE (CVE-2023-40044) Critical Xdebug remote code execution via xdebug.remote_connect_back High XML external entity injection High XML external entity injection (variant) High XML External Entity Injection via external file High XML external entity injection via File Upload High XSLT injection High XXE in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-22024) Medium Zend Framework local file disclosure via XXE injection High Zimbra Collaboration Suite SSRF (CVE-2020-7796) High
