Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache 2.x version equal to 2.0.51 Medium Apache ActiveMQ default administrative credentials High Apache Airflow Exposed configuration Medium Apache Airflow Unauthorized Access Vulnerability High Apache APISIX default token (CVE-2020-13945/CVE-2022-24112) Medium Apache balancer-manager application publicly accessible Medium Apache Geronimo default administrative credentials High Apache Tomcat insecure default administrative password High ColdFusion administrator login page publicly available Low Database User Has Admin Privileges High Ektron CMS Account Hijack High Fortinet Authentication bypass on administrative interface High Jupyter Notebook publicly accessible High Kentico CMS RCE CVE-2017-17736 High OSGi Management Console Default Credentials High RethinkDB administrative interface publicly exposed High SAP NetWeaver RECON CVE-2020-6287 High Typo3 Admin publicly accessible Informational Typo3 Install Tool publicly accessible Medium Unauthorized Access to a web app installer Medium Unprotected Apache NiFi API interface Medium Unprotected Kong Gateway Admin API interface Medium Unprotected phpMyAdmin interface High Unrestricted access to Odoo DB manager High VirtueMart access control bypass High WordPress admin accessible without HTTP authentication Low
