Web Application Vulnerabilities Index

ListJs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

LiteSpeed Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Lodash Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Log File Detected

PCI v3.2-6.5.8, CAPEC-87, CWE-425, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-34, OWASP 2013-A7, OWASP 2017-A5

Information

Login Page Identified

Information

Lua Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Magento Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Mailman Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

MarionetteJs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Mashery Proxy Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

MathJax Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

MathJs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

MediaWiki Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Mibew Messenger Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Mint Detected

CAPEC-224, CWE-205, ISO27001-A.14.2.5, WASC-45, OWASP 2017-A6

Information

Missing frame-ancestors in CSP Declaration

CWE-16, ISO27001-A.14.2.5, WASC-15

Information

Missing object-src in CSP Declaration

CWE-16, ISO27001-A.14.2.5, WASC-15

Information

Mithril Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Mod_Ssl Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Modernizr Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

MODX Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Momentjs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Mongrel Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Moodle Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

MOVEit Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Multiple Content Security Policy (CSP) Implementation Detected

CWE-16, ISO27001-A.14.2.5, WASC-15

Information

Mustachejs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

MyBB Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Next.js React Framework Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Nexus Repository OSS Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Nginx Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

No Script Block Detected with the Hash Value Declared in Content Security Policy (CSP)

ISO27001-A.14.2.5, OWASP 2013-A5, OWASP 2017-A6

Information

Nonce Usage Detected in Content Security Policy (CSP) Directive

ISO27001-A.14.2.5

Information

NTLM Authorization Required

ISO27001-A.9.4.1, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Information

NuSOAP Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Omeka Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

OpenCart Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

OpenResty Web Platform Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

OpenSearch.xml Detected

CWE-200, ISO27001-A.18.1.3

Information

OpenSSL Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

OpenVPN Access Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

OPTIONS Method Enabled

CAPEC-107, CWE-16, ISO27001-A.14.1.2, WASC-14, OWASP 2013-A5, OWASP 2017-A6

Information

Oracle Application Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Oracle HTTP Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

osClass Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

osCommerce Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

osTicket Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Out-of-date (ASP.NET MVC)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-Date (Bootstrap Select)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-Date (Bootstrap Table)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-Date (Bootstrap Typeahead)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (FrontPage)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-Date (JQuery placeholder.js)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (Mongrel)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (Oracle Application Server)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (Phusion Passenger)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (SharePoint)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date (Taleo Web Server)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (AbanteCart)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Ampache)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Angular)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (AngularJS)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Apache)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Apache Coyote)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Apache Traffic Server)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Artifactory DevOps Solution)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (ASP.NET SignalR)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Atlassian Confluence)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Atlassian Jira)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Atlassian Proxy)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (ATutor)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (axios)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Axway SecureTransport Server)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (b2evolution)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information

Out-of-date Version (Backbone.js)

PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9

Information