112311 | Apache Tomcat 7.0.41 < 7.0.79 缓存中毒漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112310 | Apache Tomcat 7.0.x < 7.0.81 多个漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112309 | Apache Tomcat 7.0.x < 7.0.82 通过 JSP Upload 进行的远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112308 | Apache Tomcat 7.0.79 < 7.0.84 不安全 CGI Servlet 搜索算法描述弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112307 | Apache Tomcat 7.0.0 < 7.0.85 安全限制弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112306 | Apache Tomcat 7.0.28 < 7.0.88 拒绝服务 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112305 | Apache Tomcat 7.0.25 < 7.0.90 多个漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | critical |
112304 | Apache Tomcat 8.5.x < 8.5.13 多个漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | critical |
112303 | Apache Tomcat 8.5.x < 8.5.15 远程错误页面操纵 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112302 | Apache Tomcat 7.0.x < 7.0.78 远程错误页面操纵 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112301 | Apache Tomcat 8.5.x < 8.5.16 多个漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112300 | Apache Tomcat 8.5.x < 8.5.23 通过 JSP Upload 进行的远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112299 | Apache Tomcat 8.5.16 < 8.5.24 不安全 CGI Servlet 搜索算法描述弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112298 | Apache Tomcat 8.5.x < 8.5.28 安全限制弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112297 | Apache Tomcat 8.5.0 < 8.5.31 拒绝服务 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112296 | Apache Tomcat 8.5.0 < 8.5.32 多个漏洞 | Web App Scanning | Component Vulnerability | 2023/3/14 | critical |
112294 | Apache Tomcat 9.0.0.M1 < 9.0.1 通过 JSP Upload 进行的远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
112293 | Apache Tomcat 9.0.0.M22 < 9.0.2 不安全 CGI Servlet 搜索算法描述弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112292 | Apache Tomcat 9.0.0.M1 < 9.0.5 安全限制弱点 | Web App Scanning | Component Vulnerability | 2023/3/14 | medium |
112291 | Apache Tomcat 9.0.0.M1 < 9.0.8 拒绝服务 | Web App Scanning | Component Vulnerability | 2023/3/14 | high |
98121 | 代码注入(Php://输入封装程序) | Web App Scanning | Code Execution | 2023/3/13 | critical |
113205 | 检测到 Spring Boot 执行器敏感端点 | Web App Scanning | Component Vulnerability | 2023/3/13 | medium |
113203 | Jolokia 1.3.7 < 1.5.0 远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/13 | high |
113202 | Jolokia 1.3.7 < 1.5.0 跨站脚本 | Web App Scanning | Component Vulnerability | 2023/3/13 | medium |
113200 | Jolokia 任意文件读取 | Web App Scanning | Component Vulnerability | 2023/3/13 | high |
113199 | Jolokia XML 外部实体 | Web App Scanning | Component Vulnerability | 2023/3/13 | high |
113198 | Spring Boot Actuator HikariCP 远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/13 | critical |
113197 | Spring Boot Actuator Logview < 0.2.13 目录遍历 | Web App Scanning | Component Vulnerability | 2023/3/13 | high |
113169 | Spring Cloud Gateway < 3.0.7/3.1.x < 3.1.1 远程代码执行 | Web App Scanning | Component Vulnerability | 2023/3/13 | critical |
113555 | SQL 语句泄露 | Web App Scanning | Data Exposure | 2023/3/8 | medium |
113371 | Amazon Cognito 用户枚举 | Web App Scanning | Web Applications | 2023/3/8 | medium |
113150 | Google 云服务帐户私钥泄露 | Web App Scanning | Data Exposure | 2023/3/8 | high |
113250 | 存储型跨站脚本 (XSS) | Web App Scanning | Cross Site Scripting | 2023/2/22 | medium |
98118 | SQL 盲注漏洞(时序攻击) | Web App Scanning | Injection | 2023/2/8 | high |
98122 | 代码注入(时序攻击) | Web App Scanning | Code Execution | 2023/1/23 | critical |
98647 | 缺少子资源完整性 | Web App Scanning | Web Applications | 2023/1/17 | info |
98593 | 检测到 PHP error_log 文件 | Web App Scanning | Web Applications | 2023/1/17 | medium |
98407 | WordPress 调试模式 | Web App Scanning | Web Applications | 2023/1/17 | medium |
113332 | 登录表单中的跨站请求伪造 | Web App Scanning | Cross Site Request Forgery | 2023/1/17 | low |
113230 | HTTP 参数污染 | Web App Scanning | Web Applications | 2023/1/17 | medium |
113080 | FTP 凭据泄露 | Web App Scanning | Data Exposure | 2023/1/17 | medium |
112613 | 允许的 HTTP 版本 | Web App Scanning | Web Applications | 2023/1/17 | info |
113438 | GLPI 9.1 < 10.0.3 SQL 注入 | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |
113437 | GLPI 9.1 < 9.5.6 Rest API IP 限制绕过 | Web App Scanning | Component Vulnerability | 2022/12/19 | high |
113436 | GLPI 默认凭据 | Web App Scanning | Component Vulnerability | 2022/12/19 | high |
113435 | GLPI < 9.3.4 SQL 注入 | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |
113432 | HTMLawed < 1.2.9 命令注入 | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |
113431 | Sitecore CMS/XP CSRF 远程代码执行 | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |
113427 | Apache Commons Text 远程代码执行 (Text4Shell) | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |
113395 | Movable Type < 6.8.7/7.x < 7.8.5 远程命令注入 | Web App Scanning | Component Vulnerability | 2022/12/19 | critical |