Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Medium Severity Vulnerabilities

Found 14578 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2009-2374
Drupal Credentials Management Errors Vulnerability
Drupal
CVE-2009-2372
Drupal Improper Control of Generation of Code (Code Injection) Vulnerability
Drupal
CVE-2008-3661
Drupal Other Vulnerability
Drupal
CVE-2020-13662
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Drupal
CVE-2020-13666
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2020-13667
Drupal Incorrect Default Permissions Vulnerability
Drupal
CVE-2020-13688
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2020-9281
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2018-14773
Drupal Vulnerability
Drupal
CVE-2021-33829
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2021-41164
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2021-41165
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2020-13676
Drupal Incorrect Authorization Vulnerability
Drupal
CVE-2020-13674
Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Drupal
CVE-2020-13672
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2020-13669
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2020-13668
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2022-25270
Drupal Incorrect Authorization Vulnerability
Drupal
CVE-2005-0682
Drupal Other Vulnerability
Drupal
CVE-2022-25276
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2021-41184
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2021-41182
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2010-5312
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2021-41183
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2010-2250
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2010-2471
Drupal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Drupal
CVE-2009-1575
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Drupal
CVE-2019-11358
Drupal Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) Vulnerability
Drupal
CVE-2015-6658
Drupal Core 6.x Multiple Vulnerabilities
Drupal
CVE-2015-6660
Drupal Core 6.x Multiple Vulnerabilities
Drupal