113197 | Spring Boot Actuator Logview < 0.2.13 Directory Traversal | Web App Scanning | Component Vulnerability | 3/13/2023 | high |
113195 | Spring Boot Actuator Detected | Web App Scanning | Component Vulnerability | 3/13/2023 | info |
113169 | Spring Cloud Gateway < 3.0.7 / 3.1.x < 3.1.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/13/2023 | critical |
113555 | SQL Statement Disclosure | Web App Scanning | Data Exposure | 3/8/2023 | medium |
113371 | Amazon Cognito User Enumeration | Web App Scanning | Web Applications | 3/8/2023 | medium |
113150 | Google Cloud Service Account Private Key Disclosure | Web App Scanning | Data Exposure | 3/8/2023 | high |
113250 | Stored Cross-Site Scripting (XSS) | Web App Scanning | Cross Site Scripting | 2/22/2023 | medium |
98074 | Backup File | Web App Scanning | Data Exposure | 2/10/2023 | medium |
98118 | Blind SQL Injection (timing attack) | Web App Scanning | Injection | 2/8/2023 | high |
98122 | Code Injection (Timing Attack) | Web App Scanning | Code Execution | 1/23/2023 | critical |
98647 | Missing Subresource Integrity | Web App Scanning | Web Applications | 1/17/2023 | info |
98593 | PHP error_log File Detected | Web App Scanning | Web Applications | 1/17/2023 | medium |
98407 | WordPress Debug Mode | Web App Scanning | Web Applications | 1/17/2023 | medium |
113332 | Login Form Cross-Site Request Forgery | Web App Scanning | Cross Site Request Forgery | 1/17/2023 | low |
113230 | HTTP Parameter Pollution | Web App Scanning | Web Applications | 1/17/2023 | medium |
113080 | FTP Credentials Disclosure | Web App Scanning | Data Exposure | 1/17/2023 | medium |
112613 | Allowed HTTP Versions | Web App Scanning | Web Applications | 1/17/2023 | info |
113438 | GLPI 9.1 < 10.0.3 SQL Injection | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113437 | GLPI 9.1 < 9.5.6 Rest API IP Restriction Bypass | Web App Scanning | Component Vulnerability | 12/19/2022 | high |
113436 | GLPI Default Credentials | Web App Scanning | Component Vulnerability | 12/19/2022 | high |
113435 | GLPI < 9.3.4 SQL Injection | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113432 | HTMLawed < 1.2.9 Code Injection | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113431 | Sitecore CMS/XP CSRF Remote Code Execution | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113427 | Apache Commons Text Remote Code Execution (Text4Shell) | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113395 | Movable Type < 6.8.7 / 7.x < 7.8.5 Remote Command Injection | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
113373 | Atlassian Bitbucket Remote Code Execution | Web App Scanning | Component Vulnerability | 12/19/2022 | high |
113343 | Apache Spark < 3.0.3 / 3.1.1 < 3.1.2 Remote Command Injection | Web App Scanning | Component Vulnerability | 12/19/2022 | high |
113341 | ServiceNow Logout Cross-Site Scripting | Web App Scanning | Component Vulnerability | 12/19/2022 | medium |
113328 | Atlassian Questions For Confluence 2.7.34 / 2.7.35 / 3.0.2 Hardcoded Credentials | Web App Scanning | Component Vulnerability | 12/19/2022 | critical |
98154 | External URLs | Web App Scanning | General | 12/12/2022 | info |
98617 | SSL/TLS Forward Secrecy Cipher Suites Not Supported | Web App Scanning | SSL/TLS | 11/10/2022 | medium |
113316 | SSL/TLS Weak Key Exchange Supported | Web App Scanning | SSL/TLS | 11/10/2022 | low |
98233 | jQuery File Upload Arbitrary File Upload | Web App Scanning | Component Vulnerability | 10/28/2022 | critical |
98645 | Sessvars < 1.01 DOM-based Cross-Site Scripting | Web App Scanning | Component Vulnerability | 10/26/2022 | medium |
98598 | jQuery Mobile < 1.2.0 Cross-site Scripting | Web App Scanning | Component Vulnerability | 10/26/2022 | medium |
112381 | Modernizr 3.x < 3.4.0 Marked Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 10/26/2022 | medium |
113213 | SQL File Detected | Web App Scanning | Data Exposure | 10/20/2022 | medium |
115491 | SSL/TLS Cipher Suites Supported | Web App Scanning | SSL/TLS | 10/7/2022 | info |
112539 | SSL/TLS Weak Cipher Suites Supported | Web App Scanning | SSL/TLS | 10/7/2022 | low |
112538 | SSL/TLS Insecure Cipher Suites Supported | Web App Scanning | SSL/TLS | 10/7/2022 | medium |
112537 | SSL/TLS Null Cipher Suites Supported | Web App Scanning | SSL/TLS | 10/7/2022 | medium |
112536 | SSL/TLS Anonymous Cipher Suites Supported | Web App Scanning | SSL/TLS | 10/7/2022 | medium |
98239 | PHP Version End of Life Advanced Notification | Web App Scanning | Component Vulnerability | 10/4/2022 | info |
98238 | Drupal Version End of Life Advanced Notification | Web App Scanning | Component Vulnerability | 10/4/2022 | info |
98096 | Access Restriction Bypass Via Origin Spoof | Web App Scanning | Authentication & Session | 8/24/2022 | medium |
98702 | Magento RSS Feed Brute Force | Web App Scanning | Web Applications | 7/25/2022 | medium |
98650 | SVN Repository Detected | Web App Scanning | Data Exposure | 7/20/2022 | medium |
98124 | Operating System Command Injection (Timing Attack) | Web App Scanning | Code Execution | 7/18/2022 | critical |
98632 | WS_FTP.LOG File Detected | Web App Scanning | Data Exposure | 6/28/2022 | medium |
98223 | PHPinfo Information Disclosure | Web App Scanning | Web Applications | 6/28/2022 | medium |