Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity (Possible) Cross site scripting Informational .htaccess File Detected Informational .NET HTTP Remoting publicly exposed High .NET JSON.NET Deserialization RCE High AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20141) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42050) Medium AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42051) Medium AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755) High AbanteCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26521) High Access-Control-Allow-Origin header with wildcard (*) value Informational ACME mini_httpd arbitrary file read High Active Mixed Content over HTTPS Medium ActiveMQ OpenWire RCE (CVE-2023-46604) Critical Adminer 4.6.2 file disclosure vulnerability High Adminer Server Side Request Forgery (SSRF) Medium Adobe Coldfusion 8 multiple linked XSS vulnerabilies High Adobe ColdFusion 9 administrative login bypass High Adobe ColdFusion directory traversal High Adobe Commerce/Magento "CosmicSting" XXE (CVE-2024-34102) Critical Adobe Experience Manager Information Disclosure via Apache Sling v2.3.6 vulnerability Medium Adobe Experience Manager Misconfiguration High Adobe Flex 3 DOM-based XSS vulnerability High Agentejo Cockpit CMS resetpassword NoSQLi (CVE-2020-35847) High AjaxControlToolkit directory traversal High AjaxPro.NET Professional Deserialization RCE (CVE-2021-23758) High Akeeba backup access control bypass High Alibaba Nacos Authentication Bypass (CVE-2021-29441) High Amazon S3 public bucket Medium Amazon S3 publicly writable bucket High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-47828) Medium Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51484) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51485) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51487) High Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51488) Medium Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51489) Medium Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375) High Ampache Improper Access Control Vulnerability (CVE-2021-21399) High Ampache Improper Authentication Vulnerability (CVE-2007-4438) Medium Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929) High Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12386) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32644) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0606) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28852) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28853) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41665) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-47184) Medium Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51486) High Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51490) Critical Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385) High Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15153) Critical Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-0771) High Ampache Other Vulnerability (CVE-2006-5668) High Ampache Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-4665) High Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4231) Medium Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490) High AngularJS client-side template injection High AngularJS Improper Input Validation Vulnerability (CVE-2019-10768) High AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863) Medium AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7676) Medium AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-25869) Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25844) High AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116) Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26117) Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26118) Medium AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490) High AngularJS Other Vulnerability (CVE-2024-8372) Medium AngularJS Other Vulnerability (CVE-2024-8373) Medium An Unsafe Content Security Policy (CSP) Directive in Use Informational Apache 2.2.14 mod_isapi Dangling Pointer High Apache 2.x version equal to 2.0.51 Medium Apache 2.x version older than 2.0.43 Medium Apache 2.x version older than 2.0.45 Medium Apache 2.x version older than 2.0.46 Medium Apache 2.x version older than 2.0.47 Medium Apache 2.x version older than 2.0.48 Medium 12345...306 1 / 306
