v.26.4.2314

Configuration

This page lists 406 vulnerabilities in this category.

Critical: 4 High: 127 Medium: 173 Low: 51 Information: 51

Vulnerability Name

CVE

CWE

Severity

Lucee Unset Admin Password

CWE-200

Critical

Unrestricted access to Apache HugeGraph

CWE-200

Critical

Kentico Staging API Authentication Bypass

CVE-2025-2746

CWE-287

Critical

ASP.NET ViewState Weak Validation Key

CWE-321

Critical

Trace.axd Detected

CWE-215

High

IIS extended unicode directory traversal vulnerability

CVE-2000-0884

CWE-22

High

WebDAV Directory Has Write Permissions

CWE-732

High

Code Execution via WebDav

CWE-434

High

Apache Axis2 administration console weak password

CWE-200

High

Devise weak password

CWE-200

High

GlassFish admin console weak credentials

CWE-1391

High

IBM WebSphere administration console weak password

CWE-200

High

Microsoft IIS WebDAV authentication bypass

CVE-2009-1535

CWE-287

High

Jenkins weak password

CWE-200

High

Microsoft IIS5 NTLM and Basic authentication bypass

CVE-2007-2815

CWE-288

High

SAP weak/predictable user credentials

CWE-200

High

Weak password

CWE-200

High

WebLogic admin console weak credentials

CWE-1391

High

Webmail weak password

CWE-200

High

Web application default/weak credentials

CWE-200

High

Apache Roller OGNL injection

CVE-2013-4212

CWE-20

High

PHP magic_quotes_gpc is disabled

CWE-150

High

CodeIgniter session decoding vulnerability

CWE-327

High

Adobe ColdFusion 9 administrative login bypass

CVE-2013-0632

CWE-287

High

Vulnerable project dependencies

CWE-1395

High

Core dump file

CWE-200

High

The DROWN attack (SSLv2 supported)

CVE-2016-0800

CWE-327

High

Method Tampering

CWE-285

High

HTTP verb tampering via POST

CWE-285

High

The Heartbleed Bug

CVE-2014-0160

CWE-200

High

Multiple vulnerabilities in Ioncube loader-wizard.php

CWE-552

High

JAAS authentication bypass

CWE-288

High

JIRA Security Advisory 2013-02-21

CWE-22

High

Java Debug Wire Protocol remote code execution

CWE-94

High

Jetpack 2.9.3: Critical Security Update

CVE-2014-0173

CWE-287

High

Joomla 1.5 end of life

CWE-1104

High

Joomla! 3.2.1 sql injection

CWE-89

High

Magento Cacheleak

CWE-200

High

MediaWiki remote code execution

CVE-2014-1610

CWE-20

High

MovableType remote code execution

CVE-2015-1592

CWE-94

High

RoR Database Configuration File Detected

CWE-538

High

Insecure Transportation Security Protocol Supported (SSLv2)

CWE-326

High

Insecure Transportation Security Protocol Supported (SSLv3)

CWE-326

High

Reachable SharePoint interface

CWE-200

High

SharePoint user enumeration

CWE-200

High

Struts 2 development mode

CWE-489

High

Elasticsearch service accessible

CWE-200

High

Roundcube security updates 0.8.6 and 0.7.3

CVE-2013-1904

CWE-22

High

CodeIgniter weak encryption key

CWE-200

High

Ruby on Rails weak/known secret token

CVE-2013-0156

CWE-200

High

Apache Geronimo default administrative credentials

CWE-1392

High

Apache Tomcat insecure default administrative password

CVE-2009-3548

CWE-798

High

JBoss BSHDeployer MBean

CWE-200

High

JBoss HttpAdaptor JMXInvokerServlet

CWE-94

High

JBoss JMX management console

CWE-200

High

JBoss ServerInfo MBean

CVE-2010-0738

CWE-200

High

JBoss Server MBean

CWE-200

High

JBoss JMX Console Unrestricted Access

CWE-200

High

JBoss Web Console JMX Invoker

CWE-200

High

Unprotected phpMyAdmin interface

CWE-205

High

Apache solr service exposed

CWE-200

High

Padding oracle attack

CWE-209

High

XML entity injection

CWE-611

High

XML external entity injection and XML injection

CWE-611

High

XML external entity injection

CWE-611

High

XML External Entity Injection via external file

CWE-611

High

XML external entity injection via File Upload

CWE-611

High

XML external entity injection (variant)

CWE-611

High

Elmah.axd / Errorlog.axd Detected

CWE-209

High

Nginx PHP code execution via FastCGI

CWE-94

High

Insecure Transportation Security Protocol Supported (TLS 1.0)

CWE-326

High

Joomla! Core Security Bypass

CVE-2017-11364

CWE-285

High

Atlassian Jira insecure REST permissions

CWE-306

High

Web Cache Poisoning

CWE-44

High

Adobe Experience Manager Misconfiguration

CVE-2016-0957

CWE-1188

High