Web Application Vulnerabilities Index

This page lists X vulnerabilities classified as CAPEC-118 that can be detected by Invicti.

Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
AWS Dockerrun Configuration File Detected
AWS Dockerrun Configuration File Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Low
Credit Card Disclosure
Credit Card Disclosure
CAPEC-118
, 
CWE-213
, 
ISO27001-A.18.1.4
, 
OWASP 2013-A6
, 
OWASP 2017-A3
, 
PCI v3.2-6.5.3
, 
WASC-13
, 
Information
CVS Detected
CVS Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Database Error Message Disclosure
Database Error Message Disclosure
CAPEC-118
, 
CWE-210
, 
HIPAA-164.306(a)
, 
HIPAA-164.308(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
PCI v3.2-6.5.5
, 
WASC-13
, 
Low
Database Name Disclosure (Microsoft SQL Server)
Database Name Disclosure (Microsoft SQL Server)
CAPEC-118
, 
CWE-201
, 
HIPAA-164.306(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
PCI v3.2-6.5.5
, 
WASC-13
, 
Low
Database Name Disclosure (MySQL)
Database Name Disclosure (MySQL)
CAPEC-118
, 
CWE-201
, 
HIPAA-164.306(a)
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
PCI v3.2-6.5.5
, 
WASC-13
, 
Low
Docker Cloud Stack File Detected
Docker Cloud Stack File Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Low
Docker Compose File Detected
Docker Compose File Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Low
Dockerfile Detected
Dockerfile Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Low
.dockerignore File Detected
.dockerignore File Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Low
Email Address Disclosure
Email Address Disclosure
CAPEC-118
, 
CWE-200
, 
ISO27001-A.9.4.1
, 
WASC-13
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
, 
Information
Generic Email Address Disclosure
Generic Email Address Disclosure
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.4
, 
WASC-13
, 
Information
GIT Detected
GIT Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Medium
Information Disclosure (Microsoft Office)
Information Disclosure (Microsoft Office)
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
Low
Internal Path Disclosure (*nix)
Internal Path Disclosure (*nix)
CAPEC-118
, 
CWE-200
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.1
, 
WASC-13
, 
OWASP 2017-A6
, 
Information
Internal Path Disclosure (Windows)
Internal Path Disclosure (Windows)
CAPEC-118
, 
CWE-200
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.8.1.1
, 
WASC-13
, 
Information
JetBrains .idea Project Directory Detected
JetBrains .idea Project Directory Detected
CAPEC-118
, 
CWE-285
, 
ISO27001-A9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
, 
Medium
Json Web Key Set Disclosure
Json Web Key Set Disclosure
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.4
, 
WASC-13
, 
Information
Private Json Web Key Set Disclosure
Private Json Web Key Set Disclosure
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.4
, 
WASC-13
, 
Critical
Programming Error Message
Programming Error Message
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-210
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
Low
Programming Error Message (Ruby)
Programming Error Message (Ruby)
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-210
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
Low
RSA Private Key Detected
RSA Private Key Detected
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A6
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
, 
Medium
Social Security Number Disclosure
Social Security Number Disclosure
PCI v3.2-6.5.3
, 
CAPEC-118
, 
CWE-213
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A6
, 
OWASP 2017-A3
, 
Low
Source Code Disclosure (ASP.NET)
Source Code Disclosure (ASP.NET)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (ColdFusion)
Source Code Disclosure (ColdFusion)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Generic)
Source Code Disclosure (Generic)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Java)
Source Code Disclosure (Java)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Java Servlet)
Source Code Disclosure (Java Servlet)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (JSP)
Source Code Disclosure (JSP)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Perl)
Source Code Disclosure (Perl)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (PHP)
Source Code Disclosure (PHP)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Python)
Source Code Disclosure (Python)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Ruby)
Source Code Disclosure (Ruby)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
Source Code Disclosure (Tomcat)
Source Code Disclosure (Tomcat)
CAPEC-118
, 
CWE-540
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.9.4.5
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Medium
SVN Detected
SVN Detected
CAPEC-118
, 
CWE-527
, 
ISO27001-A.9.4.1
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
High
Username Disclosure (Microsoft SQL Server)
Username Disclosure (Microsoft SQL Server)
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-201
, 
HIPAA-164.306(a)
, 
ISO27001-A.18.1.4
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
Low
Username Disclosure (MySQL)
Username Disclosure (MySQL)
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-201
, 
HIPAA-164.306(a)
, 
ISO27001-A.18.1.4
, 
WASC-13
, 
OWASP 2013-A5
, 
OWASP 2017-A3
, 
Low
Windows Username Disclosure
Windows Username Disclosure
PCI v3.2-6.5.5
, 
CAPEC-118
, 
CWE-200
, 
ISO27001-A.18.1.3
, 
WASC-13
, 
OWASP 2013-A6
, 
OWASP 2017-A3
, 
Low
WS_FTP Log File Detected
WS_FTP Log File Detected
CAPEC-118
, 
CWE-538
, 
ISO27001-A.9.4.1
, 
WASC-13
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
, 
Information