| 112765 | Apache Struts 2.x < 2.5.26 Remote Code Execution (S2-061) | Web App Scanning | Component Vulnerability | 2/1/2022 | critical |
| 112764 | Apache Struts 2.x < 2.3.34 / 2.5.x < 2.5.12 Remote Code Execution (S2-053) | Web App Scanning | Component Vulnerability | 2/1/2022 | critical |
| 98088 | Exposed Localstart.asp Page | Web App Scanning | Web Applications | 1/26/2022 | medium |
| 98073 | Backup Directory | Web App Scanning | Data Exposure | 1/26/2022 | medium |
| 98044 | Scan Aborted After Being Logged Out | Web App Scanning | Authentication & Session | 1/26/2022 | info |
| 98043 | Scan Logged-out Intermittently | Web App Scanning | Authentication & Session | 1/26/2022 | info |
| 98983 | Insecure Cross-Origin Resource Sharing Configuration | Web App Scanning | HTTP Security Header | 11/26/2021 | medium |
| 98943 | Laravel Log File Detected | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98740 | Cross-Site Scripting (XSS) in script src | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 98701 | JetBrains .idea Directory Detected | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98680 | CVS Repository Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 98646 | .DS_Store File Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 98630 | Apache .htaccess and .htpasswd Disclosure | Web App Scanning | Web Servers | 11/26/2021 | medium |
| 98616 | TLS 1.2 Not Supported Protocol | Web App Scanning | SSL/TLS | 11/26/2021 | low |
| 98615 | Basic Authentication Without HTTPS | Web App Scanning | Authentication & Session | 11/26/2021 | medium |
| 98595 | Gitignore File Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 98524 | Apache Tomcat Default Files | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98226 | Apache mod_info Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98211 | Joomla! Configuration Backup Files Detected | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98210 | Drupal Configuration Backup Files Detected | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98204 | WordPress Configuration Backup Files Detected | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98108 | Cross-Site Scripting (XSS) in event tag of HTML element | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 98106 | Cross-Site Scripting (XSS) in attribute context | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 98105 | Cross-Site Scripting (XSS) in HTML tag | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 98102 | Session Fixation | Web App Scanning | Authentication & Session | 11/26/2021 | medium |
| 98099 | Publicly writable directory | Web App Scanning | Web Servers | 11/26/2021 | high |
| 98065 | Insecure Client-Access Policy | Web App Scanning | Web Applications | 11/26/2021 | low |
| 113016 | Cross-Site Script Inclusion (XSSI) | Web App Scanning | Cross Site Scripting | 11/26/2021 | medium |
| 112922 | Nginx Vhost Traffic Status Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112893 | X-Cart Concierge Module Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112811 | X-Cart Files Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112799 | Exposed Session Token | Web App Scanning | Authentication & Session | 11/26/2021 | medium |
| 112794 | Weak Session Management Detected | Web App Scanning | Authentication & Session | 11/26/2021 | high |
| 112772 | Microsoft FrontPage Insecure Extension Configuration | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112771 | phpBB Directories Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 112721 | Duplicator Plugin for WordPress Installation File Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112715 | WordPress Plugins Sensitive Files Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112563 | SSL/TLS Certificate Lifetime Greater Than 398 Days | Web App Scanning | SSL/TLS | 11/26/2021 | low |
| 112542 | SSL/TLS Certificate Signed Using Weak Hashing Algorithm | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112531 | Git Repository Detected | Web App Scanning | Data Exposure | 11/26/2021 | medium |
| 112495 | SSL/TLS Self-Signed Certificate | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112494 | SSL Insecure Protocols | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112493 | SSL/TLS Certificate Expired | Web App Scanning | SSL/TLS | 11/26/2021 | medium |
| 112361 | Lighttpd Status Module Information Disclosure | Web App Scanning | Web Applications | 11/26/2021 | medium |
| 98024 | HTTP Server Authentication Detected | Web App Scanning | Authentication & Session | 11/23/2021 | info |
| 98215 | WordPress XML-RPC Interface Detected | Web App Scanning | Component Vulnerability | 11/17/2021 | medium |
| 113046 | Virtual JDBC Remote Code Execution | Web App Scanning | Component Vulnerability | 11/15/2021 | critical |
| 112944 | Atlassian Confluence Webwork OGNL Injection | Web App Scanning | Component Vulnerability | 10/8/2021 | critical |
| 98999 | Atlassian OAuth Plugin 1.3.0 < 1.9.12 / 2.0.0 < 2.0.4 Server-Side Request Forgery | Web App Scanning | Component Vulnerability | 9/7/2021 | medium |
| 98997 | Kentico CMS 9.x < 10.0.52 / 11.0.x < 11.0.48 / 12.0.x < 12.0.15 Remote Code Execution | Web App Scanning | Component Vulnerability | 9/7/2021 | critical |
