Simplifying
Choosing
Vulnerabilities
Simplifying
Choosing
Vulnerabilities
581+ Signatures
Latest entity 7 months ago
| Title | Date | Severity |
|---|---|---|
|
Beyondtrust Bomgar XSS CVE-2021-31589
|
||
|
Websphere Portal SSRF
|
||
|
Apache APISIX Unauth API CVE-2021-45232
|
||
|
Tableau Server DOM XSS
|
||
|
Grafana Unauth LFI
|
||
|
Harbor Registry Unauthentication
|
||
|
vCenter Server LFI
|
||
|
X Prefix Header Cache Poisoning
|
||
|
keycloak-ssrf-cve-2020-10770
|
||
|
Metabase GeoJSON API SSRF
|
||
|
XSS vulnerability in GraphQL Playground from untrusted schemas (CVE-2021-41249)
|
||
|
Graphql Playground XSS (CVE-2020-4038)
|
||
|
Graphql IntrospectionQuery Enabled
|
||
|
Exchange POST based XSS (CVE-2021-41349)
|
||
|
Grafana AngularJS XSS (CVE-2021-41174)
|
||
|
GoCD Secret Leak
|
||
|
Pre-Auth Takeover of Build Pipelines in GoCD (CVE-2021-43287)
|
||
|
AEM XML External Entity (CVE-2019-8086)
|
||
|
Sitecore Report Pre-Auth RCE
|
||
|
Alibaba Anyproxy LFI
|
||
|
Movable RCE CVE 2021-20837
|
||
|
Tomcat Default Credentials
|
||
|
AEM Default Credentials
|
||
|
cAdvisor Container Exposed
|
||
|
Apache Zeppelin Unauthentication Panel
|
||
|
MKDocs LFI (CVE-2021-40978)
|
||
|
Apache Path Traversal - CVE-2021-41773
|
||
|
Apache Httpd Limited cross-site scripting in mod_proxy error page - CVE-2019-10092
|
||
|
Apache OFBiz XXE (CVE-2018-8033)
|
||
|
Apache OFBiz Deserialization CVE-2020-9496
|
||
|
AEM Mod_Proxy SSRF - CVE-2021-40438
|
||
|
Aviatrix Controller RCE CVE-2021-40870
|
||
|
Jira Service Management Prototype Pollution
|
||
|
microstrategy SSRF
|
||
|
MicroStrategy Information Disclosure CVE-2020-11450
|
||
|
vCenter Unauth Upload RCE CVE-2021-22005
|
||
|
Jira Pre Auth RCE (CVE-2021-26084)
|
||
|
GitLab RCE via Exiftool CVE-2021-22205
|
||
|
Omi Unauthenticated RCE (CVE-2021-38647)
|
||
|
Grafana Unauth Snapshot Access
|
||
|
Grafana Unauth Panel
|
||
|
Grafana default credentials
|
||
|
MinIO Browser API SSRF vulnerability (CVE-2021-21287)
|
||
|
Oracle EBS XXE (CVE-2021-2400)
|
||
|
AEM SSRF via SalesforceSecretServlet (CVE-2018-12809)
|
||
|
Oracle Weblogic - cve-2017-10271
|
||
|
Oracle Weblogic - CVE-2019-2729
|
||
|
Apache AXIS XXE (CVE-2016-3473)
|
||
|
AEM Metadata XSS Generic
|
||
|
AEM Groovy Console Exposed
|