v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4

Vulnerability Name

CVE

CWE

Severity

JetLeak vulnerability

CVE-2015-2080

CWE-200

High

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4605)

CVE-2011-4605

CWE-264

High

Apache Struts 2 ClassLoader manipulation and denial of service

CVE-2014-0114

CWE-701

High

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38024)

CVE-2024-38024

CWE-502

High

Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-65324)

CVE-2026-65324

CWE-400

High

GeoServer Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-51444)

CVE-2023-51444

CWE-434

High

Rukovoditel Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53913)

CVE-2023-53913

CWE-1236

High

Django CVE-2024-41989 Vulnerability (CVE-2024-41989)

CVE-2024-41989

High

PrestaShop Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-41651)

CVE-2024-41651

CWE-918

High

Magento remote code execution

CVE-2015-1399

CWE-94

High

LimeSurvey Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-39063)

CVE-2024-39063

CWE-352

High

DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65898)

CVE-2026-65898

CWE-707

High

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6638)

CVE-2026-6638

CWE-138

High

Horde/IMP Plesk webmail exploit

CWE-20

High

Invision Power Board version 3.3.4 unserialize PHP code execution

CVE-2012-5692

CWE-20

High

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-43425)

CVE-2024-43425

CWE-94

High

Joomla! 1.6/1.7/2.5 privilege escalation vulnerability

CVE-2012-1563

CWE-269

High

Joomla! 1.6.0 SQL injection vulnerability

CVE-2011-1151

CWE-89

High

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65663)

CVE-2026-65663

CWE-502

High

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-0777)

CVE-1999-0777

CWE-264

High

Moodle Improper Validation of Specified Type of Input Vulnerability (CVE-2024-43426)

CVE-2024-43426

CWE-1287

High

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4927)

CVE-2012-4927

CWE-138

High

Zope Web Application Server Other Vulnerability (CVE-2001-1227)

CVE-2001-1227

High

Joomla! 1.7/2.5 SQL injection vulnerability

CVE-2012-1116

CWE-89

High

Moodle Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-43428)

CVE-2024-43428

CWE-345

High

OpenSSL CVE-2023-4807 Vulnerability (CVE-2023-4807)

CVE-2023-4807

High

WP Plugin Contact Form 7 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-6449)

CVE-2023-6449

CWE-434

High

XWiki Missing Authorization Vulnerability (CVE-2024-43401)

CVE-2024-43401

CWE-862

High

silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4960)

CVE-2011-4960

CWE-138

High

Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)

CVE-2023-6271

High

Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60454)

CVE-2026-60454

CWE-269

High

Envoy Proxy Other Vulnerability (CVE-2024-34363)

CVE-2024-34363

High

Mailman Other Vulnerability (CVE-2001-1132)

CVE-2001-1132

High

Ektron CMS multiple vulnerabilities

CWE-434

High

Mailman Other Vulnerability (CVE-2000-0861)

CVE-2000-0861

High

PostgreSQL Use of Inherently Dangerous Function Vulnerability (CVE-2026-6477)

CVE-2026-6477

CWE-242

High

Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60431)

CVE-2026-60431

CWE-200

High

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6637)

CVE-2026-6637

CWE-138

High

Oracle Application Server Other Vulnerability (CVE-2001-1216)

CVE-2001-1216

High

Apache Roller OGNL injection

CVE-2013-4212

CWE-20

High

Grafana CVE-2023-4822 Vulnerability (CVE-2023-4822)

CVE-2023-4822

High

Ektron CMS unauthenticated code execution and Local File Read

CVE-2012-5358

CWE-20

High

Elasticsearch remote code execution

CVE-2014-3120

CWE-78

High

Gallery 3.0.4 remote code execution

CWE-20

High

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-60415)

CVE-2026-60415

CWE-200

High

Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-34351)

CVE-2024-34351

CWE-918

High

Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-38875)

CVE-2024-38875

CWE-130

High

TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)

CVE-2026-6553

CWE-312

High

Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53933)

CVE-2023-53933

CWE-434

High

Joomla! SQL injection vulnerability

CVE-2015-7858

CWE-89

High

Moodle Missing Authorization Vulnerability (CVE-2024-43431)

CVE-2024-43431

CWE-862

High

PmWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4453)

CVE-2011-4453

CWE-94

High

Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)

CVE-2001-1371

CWE-264

High

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60313)

CVE-2026-60313

CWE-306

High

Internet Information Services Other Vulnerability (CVE-1999-0450)

CVE-1999-0450

High

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60312)

CVE-2026-60312

CWE-306

High

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65665)

CVE-2026-65665

CWE-502

High

Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2024-38477)

CVE-2024-38477

CWE-476

High

Internet Information Services Other Vulnerability (CVE-1999-0449)

CVE-1999-0449

High

Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-43434)

CVE-2024-43434

CWE-22

High

GeoServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-38524)

CVE-2024-38524

CWE-200

High

OpenSSL Session Fixation Vulnerability (CVE-1999-0428)

CVE-1999-0428

CWE-384

High

Apache HTTP Server Other Vulnerability (CVE-2001-1449)

CVE-2001-1449

High

Apache Traffic Server CVE-2024-38479 Vulnerability (CVE-2024-38479)

CVE-2024-38479

High

Microsoft SQL Server CVE-2024-0056 Vulnerability (CVE-2024-0056)

CVE-2024-0056

High

WebLogic Improper Access Control Vulnerability (CVE-2026-60343)

CVE-2026-60343

CWE-284

High

PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2001-1246)

CVE-2001-1246

CWE-707

High

Moodle CVE-2024-34009 Vulnerability (CVE-2024-34009)

CVE-2024-34009

High

Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-38472)

CVE-2024-38472

CWE-918

High

Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-34350)

CVE-2024-34350

High

MySQL Other Vulnerability (CVE-2001-1274)

CVE-2001-1274

High

MySQL Other Vulnerability (CVE-2001-1275)

CVE-2001-1275

High

Kayako Fusion v4.51.1891 - multiple web vulnerabilities

CWE-79

High

Zope Web Application Server Other Vulnerability (CVE-2001-1278)

CVE-2001-1278

High

Werkzeug WSGI Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34069)

CVE-2024-34069

CWE-352

High