| 98105 | Cross-Site Scripting (XSS) in HTML tag | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 98102 | Session Fixation | Web App Scanning | Authentication & Session | 11/26/2021 | medium |
| 98101 | Response Splitting | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98099 | Publicly writable directory | Web App Scanning | Web Servers | 11/26/2021 | high |
| 98091 | Mixed Resource Detection | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98065 | Insecure Client-Access Policy | Web App Scanning | Web Applications | 11/26/2021 | low |
| 113016 | Cross-Site Script Inclusion (XSSI) | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 112922 | Nginx Vhost Traffic Status Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112893 | X-Cart Concierge Module Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112811 | X-Cart Files Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112799 | Exposed Session Token | Web App Scanning | Authentication & Session | 11/26/2021 | medium |
| 112794 | Weak Session Management Detected | Web App Scanning | Authentication & Session | 11/26/2021 | high |
| 112772 | Microsoft FrontPage Insecure Extension Configuration | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112771 | phpBB Directories Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112721 | Duplicator Plugin for WordPress Installation File Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112715 | WordPress Plugins Sensitive Files Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112563 | SSL/TLS Certificate Lifetime Greater Than 398 Days | Web App Scanning | SSL/TLS | 11/26/2021 | low |
| 112542 | SSL/TLS Certificate Signed Using Weak Hashing Algorithm | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112531 | Git Repository Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112495 | SSL/TLS Self-Signed Certificate | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112494 | SSL Insecure Protocols | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112493 | SSL/TLS Certificate Expired | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112361 | Lighttpd Status Module Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98024 | HTTP Server Authentication Detected | Web App Scanning | Authentication & Session | 11/23/2021 | info |
| 98215 | WordPress XML-RPC Interface Detected | Web App Scanning | Component Vulnerability | 11/17/2021 | medium |
| 113046 | Virtual JDBC Remote Code Execution | Web App Scanning | Component Vulnerability | 11/15/2021 | critical |
| 112944 | Atlassian Confluence Webwork OGNL Injection | Web App Scanning | Component Vulnerability | 10/8/2021 | critical |
| 98999 | Atlassian OAuth Plugin 1.3.0 < 1.9.12 / 2.0.0 < 2.0.4 Server-Side Request Forgery | Web App Scanning | Component Vulnerability | 9/7/2021 | medium |
| 98997 | Kentico CMS 9.x < 10.0.52 / 11.0.x < 11.0.48 / 12.0.x < 12.0.15 Remote Code Execution | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98994 | Kentico CMS < 9.0.51 / 10.x < 10.0.48 Access Control Bypass | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98988 | Magento Configuration Files | Web App Scanning | Web Applications | 9/7/2021 | high |
| 98987 | Magento Data Files | Web App Scanning | Web Applications | 9/7/2021 | high |
| 98984 | PHPUnit Remote Code Execution | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98938 | Joomla! Session Object Injection RCE | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98765 | Magento Cacheleak | Web App Scanning | Web Applications | 9/7/2021 | high |
| 98764 | vBulletin < 5.6.2 Patch Level 1 Remote Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98716 | Rails Arbitrary File Content Disclosure | Web App Scanning | Component Vulnerability | 9/7/2021 | high |
| 98704 | Drupal PHPUnit/Mailchimp Code Execution Vulnerability | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98644 | Magento Connect Manager Detected | Web App Scanning | Web Applications | 9/7/2021 | medium |
| 98613 | Atlassian Confluence < 6.6.12 / 6.7.x < 6.12.3 / 6.13.x < 6.13.3 / 6.14.x < 6.14.2 Template Injection | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98531 | Magento 2.1.x < 2.1.17 / 2.2.x < 2.2.8 / 2.3.x < 2.3.1 SQL Injection | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98525 | Apache Tomcat Manager Detected | Web App Scanning | Web Applications | 9/7/2021 | medium |
| 98399 | Drupal 8.5.x < 8.5.8 / 8.6.x < 8.6.2 Open Redirect | Web App Scanning | Component Vulnerability | 9/7/2021 | medium |
| 98222 | Joomla! User-Agent Object Injection RCE | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98221 | Drupal Coder Module Deserialization RCE | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98220 | Drupal Database Abstraction API SQLi | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98219 | Drupal RESTWS Module Page Callback RCE | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98218 | Joomla! 3.7.0 < 3.7.1 fields.php getListQuery() Method SQLi | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
| 98217 | WordPress 4.7.x < 4.7.2 REST API 'id' Parameter Privilege Escalation | Web App Scanning | Component Vulnerability | 9/7/2021 | high |
| 98216 | Drupal < 7.58 / 8.x < 8.3.9 / 8.4.x < 8.4.6 / 8.5.x < 8.5.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
