excal04 / scanviz Goto Github PK
View Code? Open in Web Editor NEWNetwork Scan Visualization - Experimental Application
License: MIT License
Network Scan Visualization - Experimental Application
License: MIT License
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
General
ID: NOCVE
* Family/Group: SSL and TLS
* Description: SSL/TLS: Missing secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
* Port / Type: 443 / tcp
* Severity: medium
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 443 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 80 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: General
* Description: TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
* Port / Type: None / tcp
* Severity: low
---
Risk: Medium
https://github.com/excal04/sonar-lang-test/blob/ba68d50e2920e45dce4720d982aa868d0786d4cf/HelloJava/HelloJava.java
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
Risk: informational
random description. use for delete
random references
random implication
needs to be mapped to a scan definition
- {'gid': 'ZIplESirqQzAHtyBnsSHTPKjZEyMTRGo'}
<% related_resources %>
Horangi detected this issue on 2019-03-20 01:00:00.759000
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.https://github.com/excal04/sonar-lang-test/blob/ba68d50e2920e45dce4720d982aa868d0786d4cf/HelloJava/HelloJava.java
Risk: Medium
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.Dummy Description
rm -rf
test
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
General
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
General
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.NOCVE (SSL and TLS)
SSL/TLS: Missing secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
Port: 443 / tcp
Severity: medium
NOCVE (Web application abuses)
Missing httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
Port: 443 / tcp
Severity: medium
NOCVE (Web application abuses)
Missing httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
Port: 80 / tcp
Severity: medium
NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
the quick
brown fox.
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie. SSL/TLS: Missing `secure` Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
Port: 443 / tcp
Severity: Severity.medium
---
### NOCVE (Web application abuses)
Missing httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
Port: 443 / tcp
Severity: Severity.medium
---
### NOCVE (Web application abuses)
Missing httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
Port: 80 / tcp
Severity: Severity.medium
---
### NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: Severity.low
---
NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
General
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
Programmers should not comment out code as it bloats programs and reduces readability.
Unused code should be deleted and can be retrieved from source control history if required.
rm -rf
NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
Dummy Description
rm -rf
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
ID: NOCVE
* Family/Group: SSL and TLS
* Description: SSL/TLS: Missing secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
* Port / Type: 443 / tcp
* Severity: medium
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 443 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 80 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: General
* Description: TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
* Port / Type: None / tcp
* Severity: low
---
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.NOCVE (General)
TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
Port: None / tcp
Severity: low
ID: NOCVE
* Family/Group: SSL and TLS
* Description: SSL/TLS: Missing secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
* Port / Type: 443 / tcp
* Severity: medium
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 443 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: Web application abuses
* Description: Missing `httpOnly` Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.
* Port / Type: 80 / tcp
* Severity: _medium_
---
* ID: NOCVE
* Family/Group: General
* Description: TCP timestamps|The remote host implements TCP timestamps and therefore allows to compute
the uptime.|To disable TCP timestamps on linux add the line 'net.ipv4.tcp_timestamps
* Port / Type: None / tcp
* Severity: low
---
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.Risk: Medium
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
When logging a message there are several important requirements which must be fulfilled:
If a program directly writes to the standard outputs, there is absolutely no way to comply with those requirements. That's why defining and using a dedicated logger is highly recommended.
System.out.println("My Message"); // Noncompliant
logger.log("My Message");
Replace this use of System.out or System.err by a logger.
View this finding in Storyfier
Horangi detected this issue on 2018-01-24 10:33:00
NOCVE (SSL and TLS)
SSL/TLS: Missing secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to information
disclosure vulnerability.|Set the 'secure' attribute for any cookies that are sent over a SSL/TLS connection.
Port: 443 / tcp
Severity: medium
secure
Cookie Attribute|The host is running a server with SSL/TLS and is prone to informationhttpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.httpOnly
Cookie Attribute|The application is missing the 'httpOnly' cookie attribute|Set the 'httpOnly' attribute for any session cookie.A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.