Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Medium Severity Vulnerabilities

Found 14578 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2022-35957
Grafana Authentication Bypass by Spoofing Vulnerability
Grafana
CVE-2022-39229
Grafana Improper Authentication Vulnerability
Grafana
CVE-2022-39307
Grafana Vulnerability
Grafana
CVE-2022-23552
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2023-0507
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2023-0594
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2023-22462
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2023-1410
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2023-2801
Grafana Improper Synchronization Vulnerability
Grafana
CVE-2023-2183
Grafana Missing Authorization Vulnerability
Grafana
CVE-2023-6152
Grafana Incorrect Authorization Vulnerability
Grafana
CVE-2018-12536
Jetty Vulnerability
Jetty
CVE-2020-27218
Jetty Vulnerability
Jetty
CVE-2009-5046
Jetty Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Jetty
CVE-2021-28169
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Jetty
CVE-2021-34429
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Jetty
CVE-2023-26049
Jetty Vulnerability
Jetty
CVE-2023-26048
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2023-40167
Jetty Vulnerability
Jetty
CVE-2023-36479
Jetty Improper Neutralization of Quoting Syntax Vulnerability
Jetty
CVE-2023-41900
Jetty Weak Authentication Vulnerability
Jetty
CVE-2024-6762
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2024-6763
Jetty Other Vulnerability
Jetty
CVE-2024-8184
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2014-9720
Tornado Observable Differences in Behavior to Error Inputs Vulnerability
Tornado
CVE-2012-2374
Tornado Improper Input Validation Vulnerability
Tornado
CVE-2023-28370
Tornado URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Tornado
CVE-2018-18288
CrushFTP Server URL Redirection to Untrusted Site (Open Redirect) Vulnerability
CrushFTP Server
CVE-2017-14038
CrushFTP Server URL Redirection to Untrusted Site (Open Redirect) Vulnerability
CrushFTP Server
CVE-2017-14037
CrushFTP Server Improper Neutralization of CRLF Sequences (CRLF Injection) Vulnerability
CrushFTP Server