Vulnerability / Bug
API Attack
API Disclosure
Application Vulnerability
Arbitrary File Creation
Arbitrary File Deletion
Autocomplete Password
Back Up Disclosure
Bad Code and Implementation
Bad SSL Configuration
Blind SQL Injection
Blind SQL Injection
Blind XSS
Broken Access Control
Broken Authentication
Broken Link
Buffer Overflow
Buffer Underflow
Cleartext Submission of Password
Command Execution
Command Injection
Cookie Without HTTP Only and Secure Flag
Credential Management
CRIME SSL or TLS Attack
CRLF Injection
Cross Domain Data Hijacking
Cross Frame Scripting (XFS)
Cross Origin Resource Sharing (CORS)
Cross Site Request Forgery (CSRF)
Deface
Denial of Service (DOS)
Deperecated Libraries
Direct Database Access
Directory Listing
Directory Traversal
DOM XSS
Edge Side Include Injection
Error Handling or Error Messages
Feature Malfunction
File Inclusion
File Uploads
Framework Vulnerability
FTP Opened
Heartbleed
HTTP Header Missing
HTTP Parameter Pollution
Input Validation
Insecure Deserialization
Insecure Direct Object References (IDOR)
Insufficient Logging and Monitoring
LDAP Injection
Log Disclosure
Malware
Other Injection
Other XSS
Poodle Attack
Possible Brute Force Attack
Possible Brute Force Attack Hardly
Possible to Use or Create Fake Account
Privilege Escalation
Rails Mass Assignment
Ransomware
Reflected XSS
Security Misconfiguration
Sensitive Data or Information Disclosure
Sensitive Path Access
Server Vulnerability
Session Fixation
Session Fixation
Session Fixation Attack
Source Code Repository Found
SQL Injection
SSH Opened
Stored XSS
Testing or Developing Pages Disclosure
Time Based SQL Injection
TLS or SSL LOGJAM attack
Trojan Shell Script
Uncontrolled Input Format
Undefined Vulnerability
Unencrypted Communication
Unfiltered or Unsanitized Input
Unnecessary Data or Files or Pages or Directories
Unusual Port or Service Open
Using Components with Known Vulnerabilities
Virus
Weak Algorithm Used
Weak or Default Password Allowed or Implementation
XML External Entities (XXE)
XML Injection
XPath injection
XSLT injection
Deskripsi
Risk Severity
Critical
High
Information
Low
Medium