Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Sensitive pages could be cached
-
CWE-200
Low
Seo Panel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-22643)
CVE-2024-22643
CWE-352
Medium
Seo Panel Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-22646)
CVE-2024-22646
CWE-209
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-100024)
CVE-2014-100024
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1855)
CVE-2014-1855
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-10838)
CVE-2017-10838
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-14384)
CVE-2018-14384
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28417)
CVE-2021-28417
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28418)
CVE-2021-28418
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28420)
CVE-2021-28420
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29008)
CVE-2021-29008
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29009)
CVE-2021-29009
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29010)
CVE-2021-29010
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39413)
CVE-2021-39413
CWE-707
Medium
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-10839)
CVE-2017-10839
CWE-138
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-28419)
CVE-2021-28419
CWE-138
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-34117)
CVE-2021-34117
CWE-138
High
Seo Panel Observable Discrepancy Vulnerability (CVE-2024-22647)
CVE-2024-22647
CWE-203
Medium
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-22648)
CVE-2024-22648
CWE-918
Medium
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29451)
CVE-2025-29451
CWE-918
High
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29452)
CVE-2025-29452
CWE-918
High
SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2020-35930)
CVE-2020-35930
-
Medium
SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2021-3002)
CVE-2021-3002
-
Medium
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5475)
CVE-2017-5475
CWE-352
High
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5476)
CVE-2017-5476
CWE-352
High
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8101)
CVE-2017-8101
CWE-352
High
Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)
CVE-2011-3800
CWE-200
Medium
Serendipity Improper Access Control Vulnerability (CVE-2016-10082)
CVE-2016-10082
CWE-284
Critical
Serendipity Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2006-6242)
CVE-2006-6242
CWE-22
Medium
Serendipity Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-39971)
CVE-2026-39971
CWE-707
High
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vu (CVE-2026-73628)
CVE-2026-73628
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6205)
CVE-2007-6205
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0124)
CVE-2008-0124
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1385)
CVE-2008-1385
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1386)
CVE-2008-1386
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2957)
CVE-2010-2957
CWE-707
Low
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1133)
CVE-2011-1133
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1135)
CVE-2011-1135
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4090)
CVE-2011-4090
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2331)
CVE-2012-2331
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5314)
CVE-2013-5314
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5670)
CVE-2013-5670
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2289)
CVE-2015-2289
CWE-707
Low
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6969)
CVE-2015-6969
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8603)
CVE-2015-8603
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10737)
CVE-2016-10737
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9681)
CVE-2016-9681
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11870)
CVE-2019-11870
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-53932)
CVE-2023-53932
CWE-707
Medium
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2332)
CVE-2012-2332
CWE-138
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2762)
CVE-2012-2762
CWE-138
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-6943)
CVE-2015-6943
CWE-138
Medium
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-1000129)
CVE-2017-1000129
CWE-138
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5609)
CVE-2017-5609
CWE-138
High
Serendipity Other Vulnerability (CVE-2004-1620)
CVE-2004-1620
-
Medium
Serendipity Other Vulnerability (CVE-2004-2525)
CVE-2004-2525
-
Medium
Serendipity Other Vulnerability (CVE-2005-1134)
CVE-2005-1134
-
High
Serendipity Other Vulnerability (CVE-2005-1448)
CVE-2005-1448
-
Medium
Serendipity Other Vulnerability (CVE-2005-1449)
CVE-2005-1449
-
Critical
Serendipity Other Vulnerability (CVE-2005-1450)
CVE-2005-1450
-
High
Serendipity Other Vulnerability (CVE-2005-1451)
CVE-2005-1451
-
High
Serendipity Other Vulnerability (CVE-2005-1452)
CVE-2005-1452
-
Critical
Serendipity Other Vulnerability (CVE-2005-1713)
CVE-2005-1713
-
Medium
Serendipity Other Vulnerability (CVE-2005-3129)
CVE-2005-3129
-
Medium
Serendipity Other Vulnerability (CVE-2006-2495)
CVE-2006-2495
-
High
Serendipity Other Vulnerability (CVE-2009-4412)
CVE-2009-4412
-
Medium
Serendipity Other Vulnerability (CVE-2015-6968)
CVE-2015-6968
-
Medium
Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)
CVE-2010-1916
CWE-264
High
Serendipity Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2026-39963)
CVE-2026-39963
CWE-565
Medium
Serendipity Remote Code Execution (CVE-2020-10964)
CVE-2020-10964
-
Critical
Serendipity Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-9752)
CVE-2016-9752
CWE-918
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2011-1134)
CVE-2011-1134
CWE-434
Critical
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10752)
CVE-2016-10752
CWE-434
Critical
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53933)
CVE-2023-53933
CWE-434
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-58282)
CVE-2024-58282
CWE-434
High