| ID | 名称 | 产品 | 系列 | 发布时间 | 最近更新时间 | 严重程度 |
|---|---|---|---|---|---|---|
| 114790 | 已检测到 MCP 服务器 | Web App Scanning | Artificial Intelligence | 2025/5/22 | 2025/7/22 | info |
| 114803 | 检测到 MCP 客户端配置文件 | Web App Scanning | Data Exposure | 2025/5/23 | 2025/5/23 | medium |
| 114921 | MCP 服务器工具中毒 | Web App Scanning | Artificial Intelligence | 2025/7/18 | 2025/7/18 | high |
| 114928 | MCP 服务器提示注入 | Web App Scanning | Artificial Intelligence | 2025/7/31 | 2025/7/31 | high |
| 114793 | 检测到 MCP 清单 | Web App Scanning | Artificial Intelligence | 2025/5/22 | 2025/5/22 | info |
| 114791 | MCP 服务器未经认证的访问 | Web App Scanning | Artificial Intelligence | 2025/6/11 | 2025/6/18 | info |
| 114797 | 检测到 MCP Inspector | Web App Scanning | Artificial Intelligence | 2025/5/22 | 2025/5/22 | info |
| 114965 | 检测到 MCP 服务器工具 | Web App Scanning | Artificial Intelligence | 2025/9/19 | 2025/9/19 | info |
| 114885 | MCP 服务器 SSE DNS 重新绑定 | Web App Scanning | Artificial Intelligence | 2025/6/20 | 2025/7/3 | medium |
| 112541 | SSL/TLS 证书通用名不匹配 | Web App Scanning | SSL/TLS | 2019/2/5 | 2025/3/28 | medium |
| 112540 | SSL/TLS 证书小于 2048 位的 RSA 密钥 | Web App Scanning | SSL/TLS | 2019/2/1 | 2023/7/13 | low |
| 114920 | OAuth 动态客户端注册许可元数据字段 | Web App Scanning | Web Applications | 2025/7/18 | 2025/7/18 | low |
| 114918 | 检测到 OAuth 动态客户端注册 | Web App Scanning | Web Applications | 2025/7/18 | 2025/7/18 | info |
| 114906 | MCP Inspector < 0.14.1 远程代码执行 | Web App Scanning | Artificial Intelligence | 2025/7/4 | 2025/7/4 | critical |
| 98114 | XPath 注入 | Web App Scanning | Injection | 2017/3/31 | 2024/8/12 | high |
| 112537 | 支持 SSL/TLS 空密码套件 | Web App Scanning | SSL/TLS | 2019/1/18 | 2022/10/7 | medium |
| 112536 | SSL/TLS 匿名密码组支持 | Web App Scanning | SSL/TLS | 2019/1/18 | 2022/10/7 | medium |
| 114947 | 用户枚举 | Web App Scanning | Data Exposure | 2025/9/3 | 2025/9/19 | medium |
| 98098 | 源代码泄露 | Web App Scanning | Data Exposure | 2017/3/31 | 2023/11/22 | medium |
| 98118 | SQL 盲注漏洞(时序攻击) | Web App Scanning | Injection | 2017/3/31 | 2023/2/8 | high |
| 113310 | XPath 盲注(差异分析) | Web App Scanning | Injection | 2022/8/8 | 2025/7/24 | high |
| 112650 | 不支持 TLS Web 服务器身份验证扩展 | Web App Scanning | SSL/TLS | 2020/11/16 | 2020/11/16 | info |
| 98124 | 操作系统命令注入(时序攻击) | Web App Scanning | Code Execution | 2017/3/31 | 2022/7/18 | critical |
| 98119 | NoSQL 盲注(差异分析) | Web App Scanning | Injection | 2017/3/31 | 2025/1/20 | high |
| 114919 | OAuth 动态客户端注册 许可重定向 URI | Web App Scanning | Web Applications | 2025/7/18 | 2025/7/18 | low |
| 98127 | LDAP 注入 | Web App Scanning | Injection | 2017/3/31 | 2023/8/9 | high |
| 112530 | 支持 SSL/TLS 版本 | Web App Scanning | SSL/TLS | 2018/10/3 | 2020/10/2 | info |
| 112538 | 支持 SSL/TLS 不安全的密码套件 | Web App Scanning | SSL/TLS | 2019/1/21 | 2022/10/7 | medium |
| 98617 | SSL/TLS 完全前向保密密码组不受支持 | Web App Scanning | SSL/TLS | 2019/6/12 | 2022/11/10 | medium |
| 112494 | SSL 不安全的协议 | Web App Scanning | SSL/TLS | 2018/10/3 | 2021/11/26 | medium |
| 115006 | 检测到自定义 HTTP 标头 | Web App Scanning | Web Applications | 2025/10/21 | 2025/10/24 | info |
| 98779 | 源代码被动泄露 | Web App Scanning | Data Exposure | 2019/12/19 | 2025/9/3 | medium |
| 114116 | XML 注入 | Web App Scanning | Injection | 2023/12/1 | 2025/7/3 | high |
| 98125 | 本地文件包含 | Web App Scanning | File Inclusion | 2017/3/31 | 2025/4/17 | high |
| 98078 | 电子邮箱地址泄露 | Web App Scanning | Data Exposure | 2017/3/31 | 2023/11/17 | info |
| 112542 | 使用弱哈希算法签名的 SSL/TLS 证书 | Web App Scanning | SSL/TLS | 2019/2/4 | 2021/11/26 | medium |
| 112495 | SSL/TLS 自签名证书 | Web App Scanning | SSL/TLS | 2018/11/23 | 2021/11/26 | medium |
| 113045 | SSL/TLS 证书包含通配符条目 | Web App Scanning | SSL/TLS | 2021/11/10 | 2021/11/10 | info |
| 112550 | 完整路径泄露 | Web App Scanning | Data Exposure | 2018/12/13 | 2024/10/3 | info |
| 114135 | 反射的输入 | Web App Scanning | Injection | 2023/12/18 | 2023/12/18 | info |
| 112493 | 已过期的 SSL/TLS 证书 | Web App Scanning | SSL/TLS | 2018/11/23 | 2021/11/26 | medium |
| 113219 | 不安全的重定向链 | Web App Scanning | SSL/TLS | 2024/5/16 | 2025/9/12 | medium |
| 112491 | SSL/TLS 证书信息 | Web App Scanning | SSL/TLS | 2018/10/3 | 2023/5/5 | info |
| 98116 | NoSQL 注入 | Web App Scanning | Injection | 2017/3/31 | 2023/8/9 | high |
| 112599 | 未检测到 SSL/TLS 服务器加密套件首选项 | Web App Scanning | SSL/TLS | 2020/9/24 | 2021/8/25 | info |
| 112544 | 未启用 HTTP 到 HTTPS 重定向 | Web App Scanning | SSL/TLS | 2019/2/12 | 2025/10/21 | medium |
| 113237 | PHP 对象反序列化 | Web App Scanning | Web Applications | 2022/6/28 | 2024/2/8 | critical |
| 98126 | 远程文件包含 | Web App Scanning | File Inclusion | 2017/3/31 | 2023/7/13 | critical |
| 112543 | 未检测到 HTTPS | Web App Scanning | SSL/TLS | 2019/2/5 | 2024/3/13 | high |
| 98611 | 错误消息 | Web App Scanning | Data Exposure | 2019/5/26 | 2025/2/3 | info |