Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648)
CVE-2026-64648
CWE-524
Medium
Next.js Use of Weak Hash Vulnerability (CVE-2026-44582)
CVE-2026-44582
-
Low
Next.js User Interface (UI) Misrepresentation of Critical Information Vulnerability (CVE-2022-23646)
CVE-2022-23646
CWE-451
High
Next.js/React Server Components RCE (CVE-2025-55182 & CVE-2025-66478)
CVE-2025-66478
CWE-502
Critical
NextJsReactFramework : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal (CVE-2026-75604)
CVE-2026-75604
-
Critical
NextJsReactFramework : Origin Validation Error Vulnerability (CVE-2026-94485)
CVE-2026-94485
CWE-346
Medium
NextJsReactFramework : Origin Validation Error Vulnerability (CVE-2026-94486)
CVE-2026-94486
CWE-346
Low
NextJsReactFramework : Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-94483)
CVE-2026-94483
CWE-918
High
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-103004)
CVE-2026-103004
CWE-524
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94484)
CVE-2026-94484
CWE-524
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94543)
CVE-2026-94543
CWE-524
Medium
NextJsReactFramework : Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-94544)
CVE-2026-94544
CWE-524
Medium
Nexus Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-77121)
CVE-2026-77121
CWE-770
Medium
Nexus Incomplete List of Disallowed Inputs Vulnerability (CVE-2026-77124)
CVE-2026-77124
CWE-184
High
Nexus Incorrect Authorization Vulnerability (CVE-2026-77122)
CVE-2026-77122
CWE-863
Medium
Nexus Incorrect Authorization Vulnerability (CVE-2026-77125)
CVE-2026-77125
CWE-863
High
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123)
CVE-2026-77123
CWE-201
Medium
Nexus Repository Manager 3 Path Traversal (CVE-2024-4956)
CVE-2024-4956
CWE-22
High
Nexus Repository Manager Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11415)
CVE-2020-11415
CWE-312
Medium
Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)
CVE-2019-15893
-
High
Nexus Repository Manager CVE-2019-7238 Vulnerability (CVE-2019-7238)
CVE-2019-7238
-
Critical
Nexus Repository Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-42568)
CVE-2021-42568
CWE-200
Medium
Nexus Repository Manager Improper Authentication Vulnerability (CVE-2019-9629)
CVE-2019-9629
CWE-287
Critical
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-15012)
CVE-2020-15012
CWE-22
High
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-30635)
CVE-2021-30635
CWE-22
Medium
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-34553)
CVE-2021-34553
CWE-22
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-12100)
CVE-2018-12100
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-16619)
CVE-2018-16619
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5306)
CVE-2018-5306
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5307)
CVE-2018-5307
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11629)
CVE-2019-11629
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14469)
CVE-2019-14469
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29159)
CVE-2021-29159
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37152)
CVE-2021-37152
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-43961)
CVE-2021-43961
CWE-138
Medium
Nexus Repository Manager Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') Vulnerability (CVE-2018-16621)
CVE-2018-16621
CWE-138
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-15588)
CVE-2019-15588
CWE-138
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-5475)
CVE-2019-5475
CWE-138
High
Nexus Repository Manager Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2026-3329)
CVE-2026-3329
CWE-307
High
Nexus Repository Manager Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-29436)
CVE-2020-29436
CWE-611
Medium
Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2018-16620)
CVE-2018-16620
CWE-863
High
Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2026-10741)
CVE-2026-10741
CWE-863
Medium
Nexus Repository Manager Incorrect Default Permissions Vulnerability (CVE-2019-9630)
CVE-2019-9630
CWE-276
High
Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-43293)
CVE-2021-43293
CWE-918
Medium
Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27907)
CVE-2022-27907
CWE-918
Medium
Nexus Repository Manager Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-16530)
CVE-2019-16530
CWE-434
High
Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2017-17717)
CVE-2017-17717
CWE-327
Critical
Nexus Repository Manager Use of Hard-coded Credentials Vulnerability (CVE-2024-5764)
CVE-2024-5764
CWE-798
Medium
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
CVE-2019-9511
CWE-770
High
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
CVE-2019-9516
CWE-770
Medium
Nginx Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2012-2089)
CVE-2012-2089
CWE-120
Medium
Nginx CVE-2009-4487 Vulnerability (CVE-2009-4487)
CVE-2009-4487
-
Medium
Nginx CVE-2010-4180 Vulnerability (CVE-2010-4180)
CVE-2010-4180
-
Medium
Nginx CVE-2011-4963 Vulnerability (CVE-2011-4963)
CVE-2011-4963
-
Medium
Nginx CVE-2013-2070 Vulnerability (CVE-2013-2070)
CVE-2013-2070
-
Medium
Nginx CVE-2023-27729 Vulnerability (CVE-2023-27729)
CVE-2023-27729
-
High
Nginx Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2263)
CVE-2010-2263
CWE-200
Medium
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42533)
CVE-2026-42533
CWE-122
High
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42945)
CVE-2026-42945
CWE-122
High
Nginx Improper Certificate Validation Vulnerability (CVE-2009-3555)
CVE-2009-3555
CWE-295
Medium
Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)
CVE-2021-3618
CWE-295
High
Nginx Improper Encoding or Escaping of Output Vulnerability (CVE-2013-4547)
CVE-2013-4547
CWE-116
High
Nginx Improper Input Validation Vulnerability (CVE-2011-4968)
CVE-2011-4968
CWE-20
Medium
Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-3898)
CVE-2009-3898
CWE-22
Medium
Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-2266)
CVE-2010-2266
CWE-22
Medium
Nginx Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-1247)
CVE-2016-1247
CWE-59
High
Nginx Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2014-3556)
CVE-2014-3556
CWE-138
Medium
Nginx Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3896)
CVE-2009-3896
CWE-119
Medium
Nginx Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0088)
CVE-2014-0088
CWE-119
High
Nginx Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20372)
CVE-2019-20372
CWE-444
Medium
Nginx Insufficient Session Expiration Vulnerability (CVE-2014-3616)
CVE-2014-3616
CWE-613
Medium
Nginx Insufficient Session Expiration Vulnerability (CVE-2025-23419)
CVE-2025-23419
CWE-613
Medium
Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-20005)
CVE-2017-20005
CWE-190
Critical
Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-7529)
CVE-2017-7529
CWE-190
High
Nginx Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-16845)
CVE-2018-16845
CWE-835
Medium