Web Application Vulnerabilities

This page lists 23441 vulnerabilities in 68 categories.

Critical: 1499 High: 12791 Medium: 8230 Low: 857 Information: 64

Vulnerability Name

CVE

CWE

Severity

Palo Alto PAN-OS Management Interface Auth Bypass (CVE-2024-0012/CVE-2024-9474)

CVE-2024-9474

CWE-306

Critical

PaloAlto Networks Expedition RCE (CVE-2024-9463)

CVE-2024-9465

CWE-918

Critical

PAN-OS GlobalProtect XSS (CVE-2025-0133)

CVE-2025-0133

CWE-79

Medium

PAN-OS Management Interface Authentication Bypass (CVE-2025-0108)

CVE-2025-0108

CWE-287

Critical

Paperclip gem SSRF (Server side request forgery)

CVE-2017-0889

CWE-918

High

PaperCut NG/MF Path Traversal (CVE-2023-39143)

CVE-2023-39143

CWE-22

Critical

Parallels Plesk SQL injection vulnerability

CVE-2012-1557

CWE-89

High

Parallels Plesk SSO XML External Entity and Cross-site scripting

-

CWE-611

High

Passive Mixed Content over HTTPS

-

CWE-284

Low

Password found in server response

-

CWE-312

Medium

Password transmitted over HTTP

-

CWE-523

Medium

Path Traversal in Next.js up to 9.3.1

CVE-2020-5284

CWE-22

Medium

Path Traversal in Oracle GlassFish server open source edition

-

CWE-22

High

Path traversal via misconfigured NGINX alias

-

CWE-22

High

Payara Files or Directories Accessible to External Parties Vulnerability (CVE-2022-45129)

CVE-2022-45129

CWE-552

High

Payara Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-37422)

CVE-2022-37422

CWE-22

High

Payara Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-8215)

CVE-2024-8215

CWE-707

High

Payara Micro File Read (CVE-2021-41381)

CVE-2021-41381

CWE-22

Medium

Payara URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-41699)

CVE-2023-41699

CWE-601

Medium

Payara URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-7312)

CVE-2024-7312

CWE-601

Medium

Pega Infinity CVE-2021-27653 Vulnerability (CVE-2021-27653)

CVE-2021-27653

-

Medium

Pega Infinity Deserialization of Untrusted Data Vulnerability (CVE-2022-24082)

CVE-2022-24082

CWE-502

Critical

Pega Infinity Improper Authentication Vulnerability (CVE-2021-27651)

CVE-2021-27651

CWE-287

Critical

Pega Infinity Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-10094)

CVE-2024-10094

CWE-94

Critical

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10716)

CVE-2024-10716

CWE-707

Medium

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-6700)

CVE-2024-6700

CWE-707

Medium

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-6701)

CVE-2024-6701

CWE-707

Medium

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-6702)

CVE-2024-6702

CWE-707

Medium

Pega Infinity Other Vulnerability (CVE-2022-24083)

CVE-2022-24083

-

Critical

Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654)

CVE-2021-27654

CWE-640

High

Pentaho API Auth bypass (CVE-2021-31602)

CVE-2021-31602

CWE-863

High

Perl Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-12723)

CVE-2020-12723

CWE-120

High

Perl CVE-2016-6185 Vulnerability (CVE-2016-6185)

CVE-2016-6185

-

High

Perl Improper Certificate Validation Vulnerability (CVE-2023-31484)

CVE-2023-31484

CWE-295

High

Perl Improper Certificate Validation Vulnerability (CVE-2023-31486)

CVE-2023-31486

CWE-295

High

Perl Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-6329)

CVE-2012-6329

CWE-94

High

Perl Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-47100)

CVE-2023-47100

CWE-755

Critical

Perl Improper Input Validation Vulnerability (CVE-2010-4777)

CVE-2010-4777

CWE-20

Medium

Perl Improper Input Validation Vulnerability (CVE-2015-8853)

CVE-2015-8853

CWE-20

High

Perl Improper Input Validation Vulnerability (CVE-2016-2381)

CVE-2016-2381

CWE-20

High

Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-1999-1386)

CVE-1999-1386

CWE-59

Medium

Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12015)

CVE-2018-12015

CWE-59

High

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5195)

CVE-2012-5195

CWE-119

High

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4330)

CVE-2014-4330

CWE-119

Low

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12814)

CVE-2017-12814

CWE-119

Critical

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12837)

CVE-2017-12837

CWE-119

High

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12883)

CVE-2017-12883

CWE-119

Critical

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2018-18312)

CVE-2018-18312

CWE-119

Critical

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2018-18314)

CVE-2018-18314

CWE-119

Critical

Perl Integer Overflow or Wraparound Vulnerability (CVE-2020-10878)

CVE-2020-10878

CWE-190

High

Perl Numeric Errors Vulnerability (CVE-2005-3962)

CVE-2005-3962

-

Medium

Perl Numeric Errors Vulnerability (CVE-2010-1158)

CVE-2010-1158

-

Medium

Perl Numeric Errors Vulnerability (CVE-2011-2939)

CVE-2011-2939

-

Medium

Perl Numeric Errors Vulnerability (CVE-2013-7422)

CVE-2013-7422

-

High

Perl Other Vulnerability (CVE-2009-3626)

CVE-2009-3626

-

Medium

Perl Other Vulnerability (CVE-2011-0761)

CVE-2011-0761

-

Medium

Perl Other Vulnerability (CVE-2011-2728)

CVE-2011-2728

-

Medium

Perl Out-of-bounds Read Vulnerability (CVE-2015-8608)

CVE-2015-8608

CWE-125

Critical

Perl Out-of-bounds Read Vulnerability (CVE-2018-18313)

CVE-2018-18313

CWE-125

Critical

Perl Out-of-bounds Read Vulnerability (CVE-2018-6798)

CVE-2018-6798

CWE-125

High

Perl Out-of-bounds Write Vulnerability (CVE-2018-18311)

CVE-2018-18311

CWE-787

Critical

Perl Out-of-bounds Write Vulnerability (CVE-2018-6797)

CVE-2018-6797

CWE-787

Critical

Perl Out-of-bounds Write Vulnerability (CVE-2018-6913)

CVE-2018-6913

CWE-787

Critical

Perl Out-of-bounds Write Vulnerability (CVE-2022-48522)

CVE-2022-48522

CWE-787

Critical

Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)

CVE-2023-47038

CWE-787

High

Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)

CVE-2023-47039

CWE-787

High

Perl Out-of-bounds Write Vulnerability (CVE-2024-56406)

CVE-2024-56406

CWE-787

High

Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2827)

CVE-2008-2827

CWE-264

Medium

Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1487)

CVE-2011-1487

CWE-264

Medium

Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238)

CVE-2016-1238

CWE-264

High

Perl Resource Management Errors Vulnerability (CVE-2008-1927)

CVE-2008-1927

-

Medium

Perl Resource Management Errors Vulnerability (CVE-2013-1667)

CVE-2013-1667

-

High

Perl Use of Externally-Controlled Format String Vulnerability (CVE-2012-1151)

CVE-2012-1151

CWE-134

Medium

Permissions-Policy header not implemented

-

CWE-1021

Information

PHP Address Book Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2778)

CVE-2013-2778

CWE-352

High

«
1
...
134
135
136
...
313
»