Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache 2.x version older than 2.0.48 Medium Apache 2.x version older than 2.0.49 Medium Apache 2.x version older than 2.0.61 Medium Apache 2.x version older than 2.2.3 Medium Apache 2.x version older than 2.2.6 Medium Apache 2.x version older than 2.2.8 Medium Apache 2.x version older than 2.2.9 Medium Apache httpd remote denial of service Medium Apache mod_jk access control bypass Medium Apache mod_rewrite off-by-one buffer overflow vulnerability High Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High Apache Struts 2 ClassLoader manipulation and denial of service High Apache Struts 2 ClassLoader manipulation and denial of service (S2-020) High Apache Tomcat version older than 6.0.35 High Apache Tomcat version older than 6.0.36 High Apache Tomcat version older than 7.0.23 High Apache Tomcat version older than 7.0.28 High Apache version older than 1.3.39 Medium Apache version older than 1.3.41 Medium Arbitrary File Deletion High Cisco Adaptive Security Appliance (ASA) Path Traversal (CVE-2018-0296) High ColdFusion AMF Deserialization RCE High Deserialization of Untrusted Data (Java JSON Deserialization) Genson High Deserialization of Untrusted Data (Java JSON Deserialization) Jackson High Drupal Core 4.6.x Denial of Service (4.6.0 - 4.6.10) High Drupal Core 4.7.x Denial of Service (4.7.0 - 4.7.4) High Drupal Core 6.x Denial of Service (6.0 - 6.32) High Drupal Core 7.x Denial of Service (7.0 - 7.19) High Drupal Core 7.x Denial of Service (7.0 - 7.30) High Drupal Core 8.7.x Denial of Service (8.7.0 - 8.7.10) High Drupal Core 8.8.0 Denial of Service (8.8.0) High Drupal Core 8.x.x Denial of Service (8.0.0 - 8.6.18) High Edge Side Include injection High GeoServer SQLi (CVE-2023-25157) High GraphQL Alias Overloading Allowed: Potential Denial of Service Vulnerability Medium GraphQL Array-based Query Batching Allowed: Potential Batching Attack Vulnerability Medium GraphQL Circular-Query via Introspection Allowed: Potential DoS Vulnerability Medium JavaMelody XML External Entity (XXE) vulnerability High Joomla! Core 2.5.x Denial of Service (2.5.0 - 2.5.9) High Joomla! Core 2.5.x Denial of Service (2.5.4 - 2.5.25) High Joomla! Core 3.0.x Denial of Service (3.0.0 - 3.0.3) High Joomla! Core 3.3.x Denial of Service (3.3.0 - 3.3.4) High Joomla! Core 3.x.x Denial of Service (3.0.0 - 3.2.5) High Joomla! Core Denial of Service (2.5.0 - 3.9.27) High Liferay TunnelServlet Deserialization Remote Code Execution High Long password denial of service High nginx range filter integer overflow Medium Node.js Web Application does not handle uncaughtException Medium Node.js Web Application does not handle unhandledRejection Medium Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587) High Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950 High Oracle Business Intelligence ReportTemplateService XXE CVE-2019-2616 High Oracle Weblogic T3 XXE (CVE-2019-2647) High Oracle Weblogic T3 XXE (CVE-2019-2888) High PHP-CGI remote code execution High PHP4 IMAP module buffer overflow vulnerability Medium PHP4 multiple vulnerabilities High PHP hangs on parsing particular strings as floating point number Medium PHP HTML entity encoder heap overflow vulnerability High PHP HTTP POST incorrect MIME header parsing vulnerability Medium PHP multipart/form-data denial of service Medium PHP object deserialization of user-supplied data Medium PHP preg_replace used on user input Medium PHP unserialize() used on user input Medium PHP version older than 4.3.8 Medium PHP version older than 5.2.1 High PHP version older than 5.2.3 High PHP version older than 5.2.5 High PHP version older than 5.2.6 High Python object deserialization of user-supplied data Medium Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface High SAP Hybris Deserialization RCE High Spring Boot Misconfiguration: Spring Boot Actuator shutdown endpoint is web exposed Low Web Cache Poisoning DoS Medium Web Cache Poisoning DoS (for javascript) Medium Web Cache Poisoning via Host Header High WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1) High WordPress 2.8.4 Denial of Service Vulnerability (0.6.2 - 2.8.4) High WordPress 3.7.x Denial of Service Vulnerability (3.7 - 3.7.25) High WordPress 3.8.x Denial of Service Vulnerability (3.8 - 3.8.25) High WordPress 3.9.x Denial of Service Vulnerability (3.9 - 3.9.23) High WordPress 4.0.x Denial of Service Vulnerability (4.0 - 4.0.22) High WordPress 4.1.x Denial of Service Vulnerability (4.1 - 4.1.22) High WordPress 4.2.x Denial of Service Vulnerability (4.2 - 4.2.19) High WordPress 4.3.x Denial of Service Vulnerability (4.3 - 4.3.15) High WordPress 4.4.x Denial of Service Vulnerability (4.4 - 4.4.14) High WordPress 4.5.x Denial of Service Vulnerability (4.5 - 4.5.13) High WordPress 4.6.x Denial of Service Vulnerability (4.6 - 4.6.10) High WordPress 4.7.x Denial of Service Vulnerability (4.7 - 4.7.9) High WordPress 4.8.x Denial of Service Vulnerability (4.8 - 4.8.5) High WordPress 4.9.x Denial of Service Vulnerability (4.9 - 4.9.4) High WordPress Denial of Service Vulnerability (0.70 - 3.6.1) High WordPress Denial of Service Vulnerability (3.5 - 3.6.1) High WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3) High WordPress Plugin Authenticator Denial of Service (1.3.0) High WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3) High WordPress Plugin EWWW Image Optimizer Denial of Service (6.0.1) High WordPress Plugin PS PHPCaptcha WP Denial of Service (1.1.0) High WordPress Plugin Reviews Plus Denial of Service (1.2.13) High WordPress Plugin Safe SVG Denial of Service (1.9.4) High WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114) High WordPress Plugin WPGraphQL Denial of Service (1.3.5) High WordPress Plugin WP Image Zoom Denial of Service (1.23) High XML entity injection High XML external entity injection High XML external entity injection (variant) High XML external entity injection and XML injection High XML External Entity Injection via external file High XML external entity injection via File Upload High XML quadratic blowup denial of service attack High
