| 114434 | Flask Weak Secret Key | Web App Scanning | Web Applications | 5/22/2025 | high |
| 114006 | Web Cache Poisoning Denial of Service | Web App Scanning | Web Applications | 5/22/2025 | high |
| 98648 | Missing 'Content-Type' Header | Web App Scanning | HTTP Security Header | 5/16/2025 | low |
| 98623 | Host Header Injection | Web App Scanning | Injection | 5/16/2025 | medium |
| 98056 | Missing HTTP Strict Transport Security Policy | Web App Scanning | HTTP Security Header | 5/16/2025 | medium |
| 114166 | SOAP API Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
| 113973 | Web Services Description Language (WSDL) File Detected | Web App Scanning | Web Applications | 5/16/2025 | info |
| 113373 | Atlassian Bitbucket Remote Code Execution | Web App Scanning | Component Vulnerability | 5/16/2025 | high |
| 114615 | Username Disclosure | Web App Scanning | Data Exposure | 4/29/2025 | low |
| 114357 | Polyfill Detected | Web App Scanning | Component Vulnerability | 4/29/2025 | medium |
| 98125 | Local File Inclusion | Web App Scanning | File Inclusion | 4/17/2025 | high |
| 98123 | Operating System Command Injection | Web App Scanning | Code Execution | 4/17/2025 | critical |
| 98100 | Path Traversal | Web App Scanning | Web Applications | 4/17/2025 | high |
| 114168 | Jenkins < 2.442 / < LTS 2.426.3 Arbitrary File Read | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 113634 | Server-Side Inclusion Injection | Web App Scanning | Injection | 4/17/2025 | high |
| 112720 | Rails < 4.2.11.3 / 5.x < 5.0.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | high |
| 112706 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 112704 | Oracle WebLogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 112545 | Oracle WebLogic Server Administration Console Detected | Web App Scanning | Web Applications | 4/17/2025 | medium |
| 112524 | Oracle WebLogic WSAT Remote Code Execution | Web App Scanning | Component Vulnerability | 4/17/2025 | critical |
| 114668 | Langflow < 1.3.0 Unauthenticated Remote Code Execution | Web App Scanning | Artificial Intelligence | 4/10/2025 | critical |
| 113452 | WordPress Plugins Detected | Web App Scanning | Web Applications | 4/10/2025 | info |
| 114681 | Next.js 13.0.x < 13.5.9 Authorization Bypass | Web App Scanning | Component Vulnerability | 4/4/2025 | critical |
| 114575 | Ollama Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 4/4/2025 | high |
| 98920 | Disclosed US Social Security Number | Web App Scanning | Data Exposure | 4/3/2025 | medium |
| 113168 | Docker Compose Configuration Detected | Web App Scanning | Data Exposure | 3/28/2025 | medium |
| 113123 | Dockerfile Detected | Web App Scanning | Data Exposure | 3/28/2025 | medium |
| 112541 | SSL/TLS Certificate Common Name Mismatch | Web App Scanning | SSL/TLS | 3/28/2025 | medium |
| 114386 | External Broken Resources Detected | Web App Scanning | Web Applications | 3/24/2025 | low |
| 98117 | Blind SQL Injection (differential analysis) | Web App Scanning | Injection | 3/18/2025 | high |
| 114621 | Docker Public Registry Detected | Web App Scanning | Web Applications | 3/18/2025 | info |
| 114400 | Apache OFBiz < 18.12.11 Server-Side Request Forgery | Web App Scanning | Component Vulnerability | 3/18/2025 | high |
| 98104 | Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 3/11/2025 | medium |
| 114614 | CraftCMS < 4.13.2 / 5.x < 5.5.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/11/2025 | critical |
| 98113 | XML External Entity | Web App Scanning | Injection | 2/25/2025 | critical |
| 98083 | CAPTCHA Detection | Web App Scanning | Web Applications | 2/25/2025 | info |
| 113078 | AngularJS Unsupported Version | Web App Scanning | Component Vulnerability | 2/24/2025 | high |
| 113034 | Out-of-Date MediaElement.Js Detected | Web App Scanning | Component Vulnerability | 2/12/2025 | info |
| 113031 | Out-of-Date JQuery UI Detected | Web App Scanning | Component Vulnerability | 2/12/2025 | info |
| 113337 | NoSQL Injection Authentication Bypass | Web App Scanning | Injection | 1/29/2025 | high |
| 113162 | MySQLjs SQL Injection Authentication Bypass | Web App Scanning | Injection | 1/29/2025 | high |
| 98119 | Blind NoSQL Injection (differential analysis) | Web App Scanning | Injection | 1/20/2025 | high |
| 98070 | Common Administration Interfaces Detection | Web App Scanning | Web Applications | 1/17/2025 | info |
| 114258 | LayerSlider Plugin for WordPress 7.9.11 < 7.10.1 SQL Injection | Web App Scanning | Component Vulnerability | 1/17/2025 | high |
| 112526 | Missing 'X-XSS-Protection' Header (deprecated) | Web App Scanning | HTTP Security Header | 1/17/2025 | info |
| 98071 | Common Files Detection | Web App Scanning | Web Servers | 1/9/2025 | info |
| 114549 | Apache Struts < 6.4.0 Unrestricted File Upload (S2-067) | Web App Scanning | Component Vulnerability | 1/7/2025 | critical |
| 98110 | DOM-based Cross-Site Scripting (XSS) in attribute context | Web App Scanning | Cross Site Scripting | 12/23/2024 | medium |
| 98107 | Cross-Site Scripting (XSS) in path | Web App Scanning | Cross Site Scripting | 12/23/2024 | medium |
| 112763 | Apache Struts 2.1.6 < 2.3.34 / 2.5 < 2.5.13 Remote Code Execution (S2-052) | Web App Scanning | Component Vulnerability | 12/19/2024 | high |
