Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15753 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2026-28383
Grafana Allocation of Resources Without Limits or Throttling Vulnerability
Grafana
CVE-2026-28380
Grafana Missing Authorization Vulnerability
Grafana
CVE-2026-28379
Grafana Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
Grafana
CVE-2026-28374
Grafana Improper Access Control Vulnerability
Grafana
CVE-2026-33380
Grafana Files or Directories Accessible to External Parties Vulnerability
Grafana
CVE-2026-9029
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2026-10601
Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Grafana
CVE-2026-8595
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Grafana
CVE-2018-12536
Jetty Vulnerability
Jetty
CVE-2020-27218
Jetty Vulnerability
Jetty
CVE-2009-5046
Jetty Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Jetty
CVE-2021-28169
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Jetty
CVE-2021-34429
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Jetty
CVE-2023-26049
Jetty Vulnerability
Jetty
CVE-2023-26048
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2023-40167
Jetty Vulnerability
Jetty
CVE-2023-36479
Jetty Improper Neutralization of Quoting Syntax Vulnerability
Jetty
CVE-2023-41900
Jetty Weak Authentication Vulnerability
Jetty
CVE-2024-6762
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2024-6763
Jetty Other Vulnerability
Jetty
CVE-2024-8184
Jetty Allocation of Resources Without Limits or Throttling Vulnerability
Jetty
CVE-2025-11143
Jetty Improper Input Validation Vulnerability
Jetty
CVE-2026-8384
Jetty Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability
Jetty
CVE-2026-6790
Jetty Improper Input Validation Vulnerability
Jetty
CVE-2014-9720
Tornado Observable Differences in Behavior to Error Inputs Vulnerability
Tornado
CVE-2012-2374
Tornado Improper Input Validation Vulnerability
Tornado
CVE-2023-28370
Tornado URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Tornado
CVE-2025-67724
Tornado Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Tornado
CVE-2026-35536
Tornado Improper Handling of Invalid Use of Special Elements Vulnerability
Tornado
CVE-2024-58384
TornadoWebServer Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response
Tornado