Component Vulnerability Family for Web App Scanning

IDNameSeverity
114258LayerSlider Plugin for WordPress 7.9.11 < 7.10.1 SQL Injection
high
114256WordPress 6.5.x < 6.5.2 Cross-Site Scripting
medium
114255WordPress 6.4.x < 6.4.4 Cross-Site Scripting
medium
114254WordPress 6.3.x < 6.3.4 Cross-Site Scripting
medium
114253WordPress 6.2.x < 6.2.5 Cross-Site Scripting
medium
114252WordPress 6.1.x < 6.1.6 Cross-Site Scripting
medium
114251Oracle Reports Servlet Arbitrary File Read
critical
114250Apache Superset < 2.1.0 Hardcoded Secret Key
critical
114249Apache 2.4.x < 2.4.59 Multiple Vulnerabilities
critical
114248Pentaho Business Server Server-Side Template Injection
critical
114246OpenCMS < 16.0 Multiples Vulnerabilities
high
114245OpenCMS < 10.5.1 Multiples Vulnerabilities
high
114243Adobe ColdFusion < 2021 Update 12 / < 2023 Update 6 Cross-Site Scripting
medium
114242Adobe ColdFusion < 2021 Update 12 / < 2023 Update 6 Remote Code Execution
critical
114241PrestaShop 1.7.7.0 SQL injection
critical
114240Atlassian Confluence 8.6.x < 8.8.1 Path Traversal
high
114239Atlassian Confluence 7.20.x < 8.5.7 Path Traversal
high
114238Atlassian Confluence < 7.19.20 Path Traversal
high
114236Apache Tomcat 8.5.x < 8.5.99 Denial Of Service
high
114235Apache Tomcat 9.0.0-M1 < 9.0.86 Denial Of Service
high
114234Apache Tomcat 10.1.0-M1 < 10.1.19 Denial Of Service
high
114233Apache Tomcat 11.0.0-M1 < 11.0.0-M17 Denial Of Service
high
114231Cisco IOS XE Remote Code Execution
critical
114230Sangfor NGAF Authentication Bypass
critical
114229Popup Builder Plugin for WordPress < 4.2.3 Cross-Site Scripting
medium
114228PyTorch Serve Server-Side Request Forgery
critical
114227Ultimate Member Plugin for WordPress < 2.8.3 SQL Injection
critical
114226LiteSpeed Cache Plugin for WordPress < 5.7.0.1 Cross-Site Scripting
medium
114225JetBrains TeamCity < 2023.11.4 Authentication Bypass
critical
114222Atlassian Confluence 7.20.x < 8.5.5 Cross-Site Scripting
high
114221Atlassian Confluence 8.7.x < 8.7.2 Cross-Site Scripting
high
114220Atlassian Confluence < 7.19.18 Cross-Site Scripting
high
114218Joomla! 1.5.x < 4.4.3 Multiple Vulnerabilities
high
114217Joomla! 5.x < 5.0.3 Multiple Vulnerabilities
high
114216Apache Tomcat 8.5.7 < 8.5.64 Request Smuggling
medium
114215Apache Tomcat 9.0.0-M11 < 9.0.44 Request Smuggling
medium
114214ConnectWise ScreenConnect < 23.9.8 Authentication Bypass
critical
114213BuddyForms Plugin for WordPress < 2.7.8 Insecure Deserialization
critical
114212Lead Generated Plugin for WordPress < 1.25 Insecure Deserialization
critical
114210Meta Data and Taxonomies Filter Plugin for WordPress < 1.3.1 Cross-Site Scripting
medium
114209Bulk Price Update for Woocommerce Plugin for WordPress < 2.2.2 Cross-Site Scripting
medium
114208InPost Gallery Plugin for WordPress < 2.1.4.2 Cross-Site Scripting
medium
114207Nginx 1.25.x < 1.25.4 Multiple Vulnerabilities
high
114206RStudio Connect < 2023.05 Open Redirect
medium
114205Html5 Video Player Plugin for WordPress < 2.5.25 SQL Injection
critical
114204My Calendar Plugin for WordPress < 3.4.22 SQL Injection
critical
114203Ivanti Connect Secure 9.x / 22.x XML External Entity
high
114198Juniper Junos OS Remote Code Execution
critical
114197Openfire Path Traversal
high
114196Ivanti Connect Secure 9.x / 22.x Server-Side Request Forgery
high