Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25102 vulnerabilities in 64 categories.

Critical: 1694 High: 13355 Medium: 9074 Low: 906 Information: 73
Vulnerability Name
CVE
CWE
Severity
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3352)
CVE-2011-3352
CWE-707
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3979)
CVE-2011-3979
CWE-707
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6168)
CVE-2013-6168
CWE-707
Medium
Zikula Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-9835)
CVE-2016-9835
CWE-138
Critical
Zimbra Collaboration LFI (CVE-2025-68645)
CVE-2025-68645
CWE-22
High
Zimbra Collaboration Suite SSRF (CVE-2020-7796)
CVE-2020-7796
CWE-918
High
Zimbra Collaboration XSS (CVE-2022-27926)
CVE-2022-27926
CWE-79
Medium
ZK Framework AuUploader Information Disclosure (CVE-2022-36537)
CVE-2022-36537
CWE-200
High
Zope Web Application Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)
CVE-2012-5507
CWE-362
Medium
Zope Web Application Server Cryptographic Issues Vulnerability (CVE-2012-6661)
CVE-2012-6661
-
Medium
Zope Web Application Server CVE-2011-2528 Vulnerability (CVE-2011-2528)
CVE-2011-2528
-
High
Zope Web Application Server CVE-2011-3587 Vulnerability (CVE-2011-3587)
CVE-2011-3587
-
Critical
Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050)
CVE-2023-41050
CWE-200
High
Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32633)
CVE-2021-32633
CWE-22
High
Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32674)
CVE-2021-32674
CWE-22
High
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-5145)
CVE-2009-5145
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1104)
CVE-2010-1104
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4924)
CVE-2011-4924
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42458)
CVE-2023-42458
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44389)
CVE-2023-44389
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) (CVE-2021-33507)
CVE-2021-33507
CWE-707
Medium
Zope Web Application Server Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2021-32811)
CVE-2021-32811
CWE-915
High
Zope Web Application Server Other Vulnerability (CVE-2000-0062)
CVE-2000-0062
-
Critical
Zope Web Application Server Other Vulnerability (CVE-2000-0483)
CVE-2000-0483
-
High
Zope Web Application Server Other Vulnerability (CVE-2000-0725)
CVE-2000-0725
-
High
Zope Web Application Server Other Vulnerability (CVE-2000-1211)
CVE-2000-1211
-
High
Zope Web Application Server Other Vulnerability (CVE-2000-1212)
CVE-2000-1212
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2001-0567)
CVE-2001-0567
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2001-1227)
CVE-2001-1227
-
High
Zope Web Application Server Other Vulnerability (CVE-2001-1278)
CVE-2001-1278
-
High
Zope Web Application Server Other Vulnerability (CVE-2002-0170)
CVE-2002-0170
-
High
Zope Web Application Server Other Vulnerability (CVE-2002-0687)
CVE-2002-0687
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2002-0688)
CVE-2002-0688
-
High
Zope Web Application Server Other Vulnerability (CVE-2005-3323)
CVE-2005-3323
-
High
Zope Web Application Server Other Vulnerability (CVE-2006-3458)
CVE-2006-3458
-
Low
Zope Web Application Server Other Vulnerability (CVE-2006-4684)
CVE-2006-4684
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2007-0240)
CVE-2007-0240
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2010-3198)
CVE-2010-3198
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2012-5486)
CVE-2012-5486
-
Medium
Zope Web Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5489)
CVE-2012-5489
CWE-264
Medium
Zope Web Application Server Resource Management Errors Vulnerability (CVE-2008-5102)
CVE-2008-5102
-
Medium
[Possible] AWStats Detected
-
CWE-538
Medium
[Possible] Backup Folder
-
CWE-538
Medium
[Possible] Backup Source Code Detected
-
CWE-538
High
[Possible] Database Connection String Detected
-
CWE-200
Medium
[Possible] Internal IP Address Disclosure
-
CWE-200
Low
[Possible] Internal Path Disclosure (*nix)
-
CWE-200
Information
[Possible] Internal Path Disclosure (Windows)
-
CWE-200
Information
[Possible] Password Transmitted over Query String
-
CWE-200
Medium
[Possible] Source Code Disclosure (Ruby)
-
CWE-540
Medium
[Possible] Sublime SFTP Config File Detected
-
CWE-200
High
[Possible] WS_FTP Log File Detected
-
CWE-538
Information