Vulnerability Name CVE Severity
WPEngine _wpeprivate/config.json information disclosure
X-Forwarded-For HTTP header security bypass
Xdebug remote code execution via xdebug.remote_connect_back
XML entity injection
XML external entity injection
XML external entity injection (variant)
XML external entity injection and XML injection
XML External Entity Injection via external file
XML external entity injection via File Upload
XML quadratic blowup denial of service attack
XOOPS CVE-2009-3963 Vulnerability (CVE-2009-3963) CVE-2009-3963
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0612) CVE-2008-0612
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3296) CVE-2008-3296
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2002-2391) CVE-2002-2391
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0611) CVE-2008-0611
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433) CVE-2008-4433
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5665) CVE-2008-5665
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-7290) CVE-2017-7290
XOOPS Other Vulnerability (CVE-2005-0743) CVE-2005-0743
XOOPS Other Vulnerability (CVE-2005-2113) CVE-2005-2113
XOOPS Other Vulnerability (CVE-2007-0377) CVE-2007-0377
XPath injection vulnerability
XSLT injection
XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719) CVE-2023-50719
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-41927) CVE-2022-41927
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-29213) CVE-2023-29213
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-40572) CVE-2023-40572
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242) CVE-2023-46242
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-48293) CVE-2023-48293
XWiki CVE-2022-31166 Vulnerability (CVE-2022-31166) CVE-2022-31166
XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471) CVE-2023-26471
XWiki CVE-2023-26474 Vulnerability (CVE-2023-26474) CVE-2023-26474
XWiki CVE-2023-35166 Vulnerability (CVE-2023-35166) CVE-2023-35166
XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573) CVE-2023-40573
XWiki CVE-2023-48241 Vulnerability (CVE-2023-48241) CVE-2023-48241
XWiki Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2022-41936) CVE-2022-41936
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208) CVE-2023-29208
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-34467) CVE-2023-34467
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-35151) CVE-2023-35151
XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-29517) CVE-2023-29517
XWiki Improper Authentication Vulnerability (CVE-2022-36092) CVE-2022-36092
XWiki Improper Authentication Vulnerability (CVE-2022-36093) CVE-2022-36093
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-11057) CVE-2020-11057
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29209) CVE-2023-29209
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29210) CVE-2023-29210
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29211) CVE-2023-29211
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29212) CVE-2023-29212
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29214) CVE-2023-29214
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29509) CVE-2023-29509
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30537) CVE-2023-30537
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35150) CVE-2023-35150
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35152) CVE-2023-35152
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37909) CVE-2023-37909
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37914) CVE-2023-37914
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-40177) CVE-2023-40177
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243) CVE-2023-46243
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721) CVE-2023-50721
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50723) CVE-2023-50723
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-13654) CVE-2020-13654
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36099) CVE-2022-36099
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36100) CVE-2022-36100
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-41934) CVE-2022-41934
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472) CVE-2023-26472
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135) CVE-2023-45135
XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648) CVE-2024-21648
XWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-37913) CVE-2023-37913
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41928) CVE-2022-41928
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41931) CVE-2022-41931
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511) CVE-2023-29511
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-37462) CVE-2023-37462
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-50722) CVE-2023-50722
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15252) CVE-2020-15252
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29510) CVE-2023-29510
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512) CVE-2023-29512
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29514) CVE-2023-29514