🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Web Application Vulnerabilities
This page lists
24917 vulnerabilities
in
62 categories
.
Critical: 1673
High: 13297
Medium: 8984
Low: 892
Information: 71
Vulnerability Name
CVE
CWE
Severity
Apache HTTP Server CVE-2012-0031 Vulnerability (CVE-2012-0031)
CVE-2012-0031
-
Medium
Apache HTTP Server CVE-2012-0053 Vulnerability (CVE-2012-0053)
CVE-2012-0053
-
Medium
Apache HTTP Server CVE-2012-0883 Vulnerability (CVE-2012-0883)
CVE-2012-0883
-
Medium
Apache HTTP Server CVE-2013-1862 Vulnerability (CVE-2013-1862)
CVE-2013-1862
-
Medium
Apache HTTP Server CVE-2013-1896 Vulnerability (CVE-2013-1896)
CVE-2013-1896
-
Medium
Apache HTTP Server CVE-2013-2249 Vulnerability (CVE-2013-2249)
CVE-2013-2249
-
High
Apache HTTP Server CVE-2013-5704 Vulnerability (CVE-2013-5704)
CVE-2013-5704
-
Medium
Apache HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
CVE-2013-6438
-
Medium
Apache HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
Apache HTTP Server CVE-2016-5387 Vulnerability (CVE-2016-5387)
CVE-2016-5387
-
High
Apache HTTP Server CVE-2016-8743 Vulnerability (CVE-2016-8743)
CVE-2016-8743
-
High
Apache HTTP Server CVE-2018-11763 Vulnerability (CVE-2018-11763)
CVE-2018-11763
-
Medium
Apache HTTP Server CVE-2018-1283 Vulnerability (CVE-2018-1283)
CVE-2018-1283
-
Medium
Apache HTTP Server CVE-2019-0190 Vulnerability (CVE-2019-0190)
CVE-2019-0190
-
High
Apache HTTP Server CVE-2019-0215 Vulnerability (CVE-2019-0215)
CVE-2019-0215
-
High
Apache HTTP Server CVE-2024-38476 Vulnerability (CVE-2024-38476)
CVE-2024-38476
-
Critical
Apache HTTP Server CVE-2024-39884 Vulnerability (CVE-2024-39884)
CVE-2024-39884
-
Medium
Apache HTTP Server CVE-2024-40725 Vulnerability (CVE-2024-40725)
CVE-2024-40725
-
Medium
Apache HTTP Server DEPRECATED: Code Vulnerability (CVE-2015-3183)
CVE-2015-3183
-
Medium
Apache HTTP Server Double Free Vulnerability (CVE-2026-23918)
CVE-2026-23918
CWE-415
High
Apache HTTP Server Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-42535)
CVE-2026-42535
CWE-668
Critical
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2003-1418)
CVE-2003-1418
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-6514)
CVE-2007-6514
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0434)
CVE-2010-0434
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2068)
CVE-2010-2068
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2791)
CVE-2010-2791
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3502)
CVE-2012-3502
CWE-200
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-30556)
CVE-2022-30556
CWE-200
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-28780)
CVE-2026-28780
CWE-122
Critical
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-34355)
CVE-2026-34355
CWE-122
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-34356)
CVE-2026-34356
CWE-122
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-42536)
CVE-2026-42536
CWE-122
High
Apache HTTP Server Improper Access Control Vulnerability (CVE-2016-4979)
CVE-2016-4979
CWE-284
High
Apache HTTP Server Improper Access Control Vulnerability (CVE-2025-23048)
CVE-2025-23048
CWE-284
Critical
Apache HTTP Server Improper Authentication Vulnerability (CVE-2017-3167)
CVE-2017-3167
CWE-287
Critical
Apache HTTP Server Improper Authentication Vulnerability (CVE-2018-1312)
CVE-2018-1312
CWE-287
Critical
Apache HTTP Server Improper Authentication Vulnerability (CVE-2025-49812)
CVE-2025-49812
CWE-287
High
Apache HTTP Server Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-3303)
CVE-2007-3303
CWE-94
Medium
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38473)
CVE-2024-38473
CWE-116
High
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38474)
CVE-2024-38474
CWE-116
Critical
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38475)
CVE-2024-38475
CWE-116
Critical
Apache HTTP Server Improper Handling of Case Sensitivity Vulnerability (CVE-2001-0766)
CVE-2001-0766
CWE-178
Critical
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3368)
CVE-2011-3368
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3639)
CVE-2011-3639
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-4317)
CVE-2011-4317
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-4415)
CVE-2011-4415
CWE-20
Low
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2012-0021)
CVE-2012-0021
CWE-20
Low
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2014-0117)
CVE-2014-0117
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2015-0228)
CVE-2015-0228
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-2161)
CVE-2016-2161
CWE-20
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-8612)
CVE-2016-8612
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-12171)
CVE-2017-12171
CWE-20
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-15715)
CVE-2017-15715
CWE-20
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-9788)
CVE-2017-9788
CWE-20
Critical
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-39573)
CVE-2024-39573
CWE-20
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-42516)
CVE-2024-42516
CWE-20
High
Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2001-0925)
CVE-2001-0925
CWE-22
Medium
Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)
CVE-2021-41773
CWE-22
High
Apache HTTP Server Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2001-0131)
CVE-2001-0131
CWE-59
Low
Apache HTTP Server Improper Locking Vulnerability (CVE-2002-1850)
CVE-2002-1850
CWE-667
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2004-0174)
CVE-2004-0174
CWE-667
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2009-2699)
CVE-2009-2699
CWE-667
High
Apache HTTP Server Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2016-4975)
CVE-2016-4975
CWE-707
Medium
Apache HTTP Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2024-24795)
CVE-2024-24795
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2024-47252)
CVE-2024-47252
CWE-150
High
Apache HTTP Server Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2025-65082)
CVE-2025-65082
CWE-150
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2000-1205)
CVE-2000-1205
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1581)
CVE-2003-1581
CWE-707
Low
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2005-3352)
CVE-2005-3352
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-3918)
CVE-2006-3918
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-4465)
CVE-2007-4465
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5000)
CVE-2007-5000
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6203)
CVE-2007-6203
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6388)
CVE-2007-6388
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6421)
CVE-2007-6421
CWE-707
Low
«
1
2
3
4
...
333
»