Web Application Vulnerabilities Index

This page lists 144 vulnerabilities categorized as medium severity that can be detected by Invicti.

Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Vulnerability Name
Classification
Severity
Private Burp Collaborator Server Identified
Private Burp Collaborator Server Identified
Information
Private Json Web Key Set Disclosure
Private Json Web Key Set Disclosure
Critical
Programming Error Message
Programming Error Message
Low
Programming Error Message (Ruby)
Programming Error Message (Ruby)
Low
Progress MOVEit Transfer SQL Injection
Progress MOVEit Transfer SQL Injection
High
ProjectSend Detected
ProjectSend Detected
Information
Prototype Pollution
Prototype Pollution
Low
Prototypejs Identified
Prototypejs Identified
Information
Python Identified
Python Identified
Information
Python WSGIserver Identified
Python WSGIserver Identified
Information
Question2Answer Detected
Question2Answer Detected
Information
ROBOT Attack Detected (Strong Oracle)
ROBOT Attack Detected (Strong Oracle)
High
ROBOT Attack Detected (Weak Oracle)
ROBOT Attack Detected (Weak Oracle)
High
RSA Private Key Detected
RSA Private Key Detected
Medium
Ramda Identified
Ramda Identified
Information
React Identified
React Identified
Information
Readme/Help File Detected
Readme/Help File Detected
Information
Referrer-Policy Needs Proper Fallback
Referrer-Policy Needs Proper Fallback
Information
Referrer-Policy Not Implemented
Referrer-Policy Not Implemented
Best Practice
Reflected File Download
Reflected File Download
Low
RegreSSHion Attack (CVE-2024-6387)
RegreSSHion Attack (CVE-2024-6387)
Critical
Remote Code Execution (Spring4Shell)
Remote Code Execution (Spring4Shell)
Critical
Remote Code Execution and DoS in HTTP.sys (IIS)
Remote Code Execution and DoS in HTTP.sys (IIS)
Critical
Remote File Inclusion
Remote File Inclusion
Critical
RequireJs Identified
RequireJs Identified
Information
Resin Application Server Identified
Resin Application Server Identified
Information
Respondjs Identified
Respondjs Identified
Information
Restlet Framework Identified
Restlet Framework Identified
Information
Retired Hash Function in SAML Response
Retired Hash Function in SAML Response
Information
RevealJs Identified
RevealJs Identified
Information
Reverse Proxy Detected (Apache Traffic Server)
Reverse Proxy Detected (Apache Traffic Server)
Information
Reverse Proxy Detected (Citrix Netscaler)
Reverse Proxy Detected (Citrix Netscaler)
Information
Reverse Proxy Detected (Envoy)
Reverse Proxy Detected (Envoy)
Information
Reverse Proxy Detected (F5 BIG-IP)
Reverse Proxy Detected (F5 BIG-IP)
Information
Reverse Proxy Detected (HAProxy)
Reverse Proxy Detected (HAProxy)
Information
Reverse Proxy Detected (Skipper)
Reverse Proxy Detected (Skipper)
Information
Revive Adserver Detected
Revive Adserver Detected
Information
Revoked SSL Certificate
Revoked SSL Certificate
Medium
Rickshaw Identified
Rickshaw Identified
Information
RiotJs Identified
RiotJs Identified
Information
RoR Database Configuration File Detected
RoR Database Configuration File Detected
Low
RoR Development Mode Enabled
RoR Development Mode Enabled
Low
Robots.txt Detected
Robots.txt Detected
Information
Roundcube Detected
Roundcube Detected
Information
Ruby on Rails File Content Disclosure (CVE-2019-5418)
Ruby on Rails File Content Disclosure (CVE-2019-5418)
High
Ruby on Rails Identified
Ruby on Rails Identified
Information
RubyGems Identified
RubyGems Identified
Information
Rukovoditel Detected
Rukovoditel Detected
Information
SAML Consumer Service KeyInfo RetrievalMethod SSRF
SAML Consumer Service KeyInfo RetrievalMethod SSRF
Medium
SAML Consumer Service XSS Vulnerability
SAML Consumer Service XSS Vulnerability
Medium
SAML Response Signature Exclusion
SAML Response Signature Exclusion
High
SAML Response Without Signature
SAML Response Without Signature
High
SQL File Detected
SQL File Detected
Information
SQL Injection
SQL Injection
Critical
SQL Injection (IAST)
SQL Injection (IAST)
Critical
SQLite Database File Found
SQLite Database File Found
Medium
SSL Certificate Is About To Expire
SSL Certificate Is About To Expire
Medium
SSL Certificate Name Hostname Mismatch
SSL Certificate Name Hostname Mismatch
Medium
SSL Untrusted Root Certificate
SSL Untrusted Root Certificate
Medium
SSL/TLS Not Implemented
SSL/TLS Not Implemented
Medium
SVN Detected
SVN Detected
High
SailsJS Identified
SailsJS Identified
Information
SameSite Cookie Not Implemented
SameSite Cookie Not Implemented
Best Practice
SameSite None Cookie Not Marked as Secure
SameSite None Cookie Not Marked as Secure
Best Practice
Scheme URI Detected in Content Security Policy (CSP) Directive
Scheme URI Detected in Content Security Policy (CSP) Directive
Information
ScrollReveal Identified
ScrollReveal Identified
Information
Security.txt Detected
Security.txt Detected
Information
Select2 Identified
Select2 Identified
Information
SemanticUI Identified
SemanticUI Identified
Information
Sensitive Data Exposure
Sensitive Data Exposure
Medium
Sensitive Data Exposure - Amazon AWS Access Key Id
Sensitive Data Exposure - Amazon AWS Access Key Id
Medium
Sensitive Data Exposure - Amazon AWS Secret Key
Sensitive Data Exposure - Amazon AWS Secret Key
Medium
Sensitive Data Exposure - Amazon MWS Auth Token
Sensitive Data Exposure - Amazon MWS Auth Token
Medium
Sensitive Data Exposure - Amazon SES SMTP Password
Sensitive Data Exposure - Amazon SES SMTP Password
Medium