CVE-2023-44487 | |
CVE-2023-40267 | |
Allocation of Resources Without Limits or Throttling | |
Inefficient Regular Expression Complexity | |
Information Exposure | |
Improper Input Validation | |
Inefficient Regular Expression Complexity | |
Interpretation Conflict | |
CVE-2023-27539 | |
Allocation of Resources Without Limits or Throttling | |
Inefficient Regular Expression Complexity | |
Inefficient Regular Expression Complexity | |
Inefficient Regular Expression Complexity | |
SQL Injection | |
Inefficient Regular Expression Complexity | |
Inefficient Regular Expression Complexity | |
Cross-site Scripting (XSS) | |
OS Command Injection | |
CVE-2022-47318 | |
Arbitrary Code Injection | |
Inefficient Regular Expression Complexity | |
Inefficient Regular Expression Complexity | |
Inefficient Regular Expression Complexity | |
CVE-2022-44566 | |
Allocation of Resources Without Limits or Throttling | |
CVE-2022-4130 | |
CVE-2022-40899 | |
OS Command Injection | |
Insufficiently Protected Credentials | |
OS Command Injection | |
OS Command Injection | |
Improper Certificate Validation | |
Resource Exhaustion | |
Allocation of Resources Without Limits or Throttling | |
Arbitrary Code Injection | |
Deserialization of Untrusted Data | |
Deserialization of Untrusted Data | |
Exposure of Resource to Wrong Sphere | |
CVE-2022-41323 | |
Out-of-bounds Write | |
Out-of-bounds Write | |
Out-of-bounds Write | |
Out-of-bounds Write | |
CVE-2022-33980 | |
Deserialization of Untrusted Data | |
Directory Traversal | |
Cross-site Scripting (XSS) | |
Cross-site Scripting (XSS) | |
Cross-site Scripting (XSS) | |
Cross-site Scripting (XSS) | |
Inefficient Regular Expression Complexity | |
Uncontrolled Recursion | |
Cross-site Scripting (XSS) | |
Inefficient Regular Expression Complexity | |
Cross-site Scripting (XSS) | |
CVE-2019-2708 | |
SQL Injection | |
SQL Injection | |
Allocation of Resources Without Limits or Throttling | |
Loop with Unreachable Exit Condition ('Infinite Loop') | |
Improper Resource Shutdown or Release | |
Improper Cross-boundary Removal of Sensitive Data | |
Directory Traversal | |
Improper Input Validation | |
CVE-2021-45115 | |
Out-of-bounds Write | |
CVE-2021-44420 | |
HTTP Request Smuggling | |
Deserialization of Untrusted Data | |
Authorization Bypass Through User-Controlled Key | |
HTTP Request Smuggling | |
OS Command Injection | |
Out-of-bounds Write | |
Out-of-bounds Write | |
Out-of-bounds Write | |
Out-of-bounds Write | |
Resource Exhaustion | |
Buffer Overflow | |
Cross-site Scripting (XSS) | |
HTTP Request Smuggling | |
HTTP Request Smuggling | |
Creation of Temporary File With Insecure Permissions | |
SQL Injection | |
Cross-site Scripting (XSS) | |
Arbitrary Argument Injection | |
Inefficient Regular Expression Complexity | |
Cross-site Scripting (XSS) | |
Resource Exhaustion | |
Resource Exhaustion | |
Deserialization of Untrusted Data | |
Directory Traversal | |
Arbitrary Code Injection | |
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') | |