Web Vulnerability & Security Checks

Select Category

Search Vulnerability

Vulnerability Name

Classifications

Severity

Squid Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Static Nonce Identified in Content Security Policy (CSP)

CWE-16, ISO27001-A.14.2.5, WASC-15, OWASP 2013-A5, OWASP 2017-A6

Information

Sugar CRM Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

swagger.json Detected

ISO27001-A.8.1.1, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

SwaggerUI Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

SweetAlert2 Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Tableau Server Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Taleo Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

TCExam Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Telerik Web UI Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Test File Detected

PCI v3.2-6.5.8, CAPEC-87, CWE-425, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-34, OWASP 2013-A7, OWASP 2017-A5

Information

ThreeJs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

TinyMCE Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Tomcat Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Tornado Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Trac Software Project Management Tool Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Tracy Debugging Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Travis CI Configuration File Detected

CWE-16, ISO27001-A.9.4.1, WASC-15, OWASP 2013-A5, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

TS Web Access Identified

PCI v3.2-6.5.8, CAPEC-87, CWE-425, HIPAA-164.306(a), 164.308(a), ISO27001-A.9.4.1, WASC-34, OWASP 2013-A7, OWASP 2017-A5, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Information

TwistedWeb HTTP Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Typeaheadjs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Typo3 Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

UNC Server and Share Disclosure

CWE-16, ISO27001-A.18.1.3, WASC-15, OWASP 2013-A5, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Information

Underscorejs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Undertow Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Unexpected Redirect Response Body (Too Large)

CWE-698, ISO27001-A.14.2.5, WASC-40

Information

Unknown Option Used In Referrer-Policy

CWE-200, ISO27001-A.14.2.5, OWASP 2013-A6, OWASP 2017-A6

Information

Unsupported Hash Detected in Content Security Policy (CSP)

CWE-16, ISO27001-A.14.2.5, WASC-15, OWASP 2013-A5, OWASP 2017-A6

Information

Vanilla Forums Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Varnish HTTP Cache Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Vegur Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Videojs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Vuejs Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

W3 Total Cache Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Weak frame-ancestors Detected in Content Security Policy (CSP) Declaration

CWE-330, ISO27001-A.14.2.5, WASC-16, OWASP 2013-A5, OWASP 2017-A6

Information

Weak Nonce Detected in Content Security Policy (CSP) Declaration

CWE-330, ISO27001-A.14.2.5, WASC-16, OWASP 2013-A5, OWASP 2017-A6

Information

Web Application Firewall Detected

ISO27001-A.18.1.3

Information

Webalizer Detected

CAPEC-224, CWE-205, ISO27001-A.14.2.5, WASC-45, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Information

Web.config File Detected

CAPEC-87, CWE-285, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-34, OWASP 2013-A7, OWASP 2017-A5, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

WebDAV Enabled

CWE-16, ISO27001-A.9.4.4, WASC-15, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:H/RL:O/RC:C

Information

webERP Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

WeBid Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

WebLogic Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Werkzeug Python WSGI Library Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Whoops Error Handler Framework Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive

ISO27001-A.14.2.5

Information

Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive

ISO27001-A.14.2.5

Information

Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive

ISO27001-A.14.2.5

Information

WildFly Application Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Windows Azure Web Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C

Information

Windows CE OS Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

Windows Server Identified

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

WordPress Configuration File Detected

PCI v3.2-6.5.8, CAPEC-87, CWE-425, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-34, OWASP 2013-A7, OWASP 2017-A5, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Information

WordPress Detected

CWE-205, ISO27001-A.14.2.5, WASC-13, OWASP 2017-A6

Information

WordPress Plugin Akismet Spam Protection Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Akismet Spam Protector Identified

Information

WordPress Plugin All In One WP Migration Identified

Information

WordPress Plugin All-in-One WP Migration Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Backup Migration Identified

Information

WordPress Plugin Backup Migration Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Classic Editor Identified

Information

WordPress Plugin Classic Editor Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Contact Form 7 Identified

Information

WordPress Plugin Contact Form 7 Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Contact Form by WPForms Identified

Information

WordPress Plugin Contact Form by WPForms Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Detected

Information

WordPress Plugin Elementor Website Builder Identified

Information

WordPress Plugin Elementor Website Builder Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Jetpack Identified

Information

WordPress Plugin Jetpack Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin Jupiter X Core Identified

Information

WordPress Plugin Jupiter X Core Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

WordPress Plugin LiteSpeed Cache Identified

Information

WordPress Plugin LiteSpeed Cache Out Of Date

CAPEC-170, CWE-205, HIPAA-164.306(a), 164.308(a), ISO27001-A.18.1.3, WASC-13, OWASP 2013-A5, OWASP 2017-A6

Information

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works

Web Application Vulnerabilities Index

Select Category

Search Vulnerability

Build your resistance to threats. And save hundreds of hours each month.