Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 24917 vulnerabilities in 62 categories.

Critical: 1673 High: 13297 Medium: 8984 Low: 892 Information: 71
Vulnerability Name
CVE
CWE
Severity
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-52725)
CVE-2026-52725
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265)
CVE-2026-54265
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267)
CVE-2026-54267
CWE-707
Medium
Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
Angular Origin Validation Error Vulnerability (CVE-2026-50168)
CVE-2026-50168
CWE-346
High
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423)
CVE-2026-41423
CWE-918
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-54268)
CVE-2026-54268
CWE-400
High
Angular Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-50170)
CVE-2026-50170
CWE-524
High
Angular Use of Weak Hash Vulnerability (CVE-2026-54266)
CVE-2026-54266
-
Medium
AngularJS client-side template injection
-
CWE-79
High
AngularJS Improper Input Validation Vulnerability (CVE-2019-10768)
CVE-2019-10768
CWE-20
High
AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863)
CVE-2019-14863
CWE-707
Medium
AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7676)
CVE-2020-7676
CWE-707
Medium
AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-25869)
CVE-2022-25869
CWE-707
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2022-25844)
CVE-2022-25844
CWE-1333
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116)
CVE-2023-26116
CWE-1333
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26117)
CVE-2023-26117
CWE-1333
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26118)
CVE-2023-26118
CWE-1333
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
AngularJS Other Vulnerability (CVE-2024-8372)
CVE-2024-8372
-
Medium
AngularJS Other Vulnerability (CVE-2024-8373)
CVE-2024-8373
-
Medium
Apache ActiveMQ default administrative credentials
-
-
High
Apache Airflow default credentials
-
CWE-798
High
Apache Airflow Experimental API Auth Bypass CVE-2020-13927
CVE-2020-13927
CWE-200
High
Apache Airflow Exposed configuration
-
CWE-200
Medium
Apache Airflow Unauthorized Access Vulnerability
-
CWE-200
High
Apache APISIX default token (CVE-2020-13945/CVE-2022-24112)
CVE-2022-24112
CWE-259
Medium
Apache Axis2 administration console weak password
-
CWE-200
High
Apache Axis2 information disclosure
-
CWE-200
Medium
Apache Axis2 web services enumeration
-
CWE-200
Low
Apache Axis2 xsd local file inclusion
-
CWE-22
High
Apache balancer-manager application publicly accessible
-
CWE-200
Medium
Apache Cassandra Unauthorized Access Vulnerability
-
CWE-200
Medium
Apache configured to run as proxy
-
CWE-441
Medium
Apache CouchDB JSON Remote Privilege Escalation Vulnerability
CVE-2017-12635
CWE-285
High
Apache Denial of service in mod_lua r:parsebody Vulnerability (CVE-2022-29404)
CVE-2022-29404
-
Medium
Apache Flink jobmanager/logs Path Traversal
CVE-2020-17519
CWE-22
High
Apache Geronimo default administrative credentials
-
CWE-1392
High
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2005-2970)
CVE-2005-2970
CWE-770
Medium
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2008-2364)
CVE-2008-2364
CWE-770
Medium
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2011-0419)
CVE-2011-0419
CWE-770
Medium
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)
CVE-2019-9517
CWE-770
High
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-30522)
CVE-2022-30522
CWE-770
High
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-27316)
CVE-2024-27316
CWE-770
High
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-29168)
CVE-2026-29168
CWE-770
High
Apache HTTP Server Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2025-66200)
CVE-2025-66200
CWE-288
Medium
Apache HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-11984)
CVE-2020-11984
CWE-120
Critical
Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-34059)
CVE-2026-34059
CWE-126
High
Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-44185)
CVE-2026-44185
CWE-126
High
Apache HTTP Server Buffer Underwrite ('Buffer Underflow') Vulnerability (CVE-2026-44631)
CVE-2026-44631
CWE-124
Critical
Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2007-1741)
CVE-2007-1741
CWE-362
Medium
Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-0217)
CVE-2019-0217
CWE-362
High
Apache HTTP Server Configuration Vulnerability (CVE-2009-1195)
CVE-2009-1195
-
Medium
Apache HTTP Server Confusion Attacks
CVE-2023-38709
CWE-436
High
Apache HTTP Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-6420)
CVE-2007-6420
CWE-352
Medium
Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2009-3555)
CVE-2009-3555
-
Medium
Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2016-0736)
CVE-2016-0736
-
High
Apache HTTP Server CVE-1999-0070 Vulnerability (CVE-1999-0070)
CVE-1999-0070
-
Medium
Apache HTTP Server CVE-1999-0236 Vulnerability (CVE-1999-0236)
CVE-1999-0236
-
High
Apache HTTP Server CVE-2002-0392 Vulnerability (CVE-2002-0392)
CVE-2002-0392
-
High
Apache HTTP Server CVE-2002-0839 Vulnerability (CVE-2002-0839)
CVE-2002-0839
-
High
Apache HTTP Server CVE-2003-0789 Vulnerability (CVE-2003-0789)
CVE-2003-0789
-
Critical
Apache HTTP Server CVE-2004-0751 Vulnerability (CVE-2004-0751)
CVE-2004-0751
-
Medium
Apache HTTP Server CVE-2004-0786 Vulnerability (CVE-2004-0786)
CVE-2004-0786
-
Medium
Apache HTTP Server CVE-2004-0809 Vulnerability (CVE-2004-0809)
CVE-2004-0809
-
Medium
Apache HTTP Server CVE-2005-2700 Vulnerability (CVE-2005-2700)
CVE-2005-2700
-
Critical
Apache HTTP Server CVE-2007-3304 Vulnerability (CVE-2007-3304)
CVE-2007-3304
-
Medium
Apache HTTP Server CVE-2009-1191 Vulnerability (CVE-2009-1191)
CVE-2009-1191
-
Medium
Apache HTTP Server CVE-2009-3720 Vulnerability (CVE-2009-3720)
CVE-2009-3720
-
Medium
Apache HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425)
CVE-2010-0425
-
Critical