Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU112144 - Direct Request ('Forced Browsing') CVE-2021-43110	CWE-425	High	No	No	-	03.07.2025	SB2025070337 SB2025070338
#VU112143 - Exposed Dangerous Method or Function CVE-2022-31491	CWE-749	High	No	No	-	03.07.2025	SB2025070337 SB2025070338
#VU84692 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-51572	CWE-78	High	No	No	-	22.12.2023	SB2023122218
#VU84691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-51586	CWE-89	High	No	No	-	22.12.2023	SB2023122218
#VU84690 - Use of Hard-coded Credentials CVE-2023-51588	CWE-798	Low	No	No	-	22.12.2023	SB2023122218
#VU84689 - Unrestricted Upload of File with Dangerous Type CVE-2023-51590	CWE-434	High	No	No	-	22.12.2023	SB2023122218
#VU84688 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-51591	CWE-611	Medium	No	No	-	22.12.2023	SB2023122218
#VU84687 - Improper Control of Generation of Code ('Code Injection') CVE-2023-51593	CWE-94	High	No	No	-	22.12.2023	SB2023122218
#VU84686 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-51595	CWE-89	High	No	No	-	22.12.2023	SB2023122218
#VU84685 - Deserialization of Untrusted Data CVE-2023-51570	CWE-502	High	No	No	-	22.12.2023	SB2023122218
#VU84684 - Missing Authorization CVE-2023-51571	CWE-862	Medium	No	No	-	22.12.2023	SB2023122218
#VU84683 - Improper Authentication CVE-2023-51573	CWE-287	High	No	No	-	22.12.2023	SB2023122218