Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)
CVE-2026-48743
-
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777)
CVE-2021-32777
CWE-863
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32779)
CVE-2021-32779
CWE-863
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)
CVE-2021-39206
CWE-863
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2026-26308)
CVE-2026-26308
CWE-863
High
Envoy Proxy Insufficient Session Expiration Vulnerability (CVE-2025-55162)
CVE-2025-55162
CWE-613
High
Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660)
CVE-2020-8660
CWE-345
Medium
Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682)
CVE-2021-28682
CWE-190
High
Envoy Proxy Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2024-32975)
CVE-2024-32975
CWE-191
High
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)
CVE-2019-18836
CWE-835
High
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-32976)
CVE-2024-32976
CWE-835
High
Envoy Proxy Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Envoy Proxy Missing Authentication for Critical Function Vulnerability (CVE-2022-29226)
CVE-2022-29226
CWE-306
Critical
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)
CVE-2019-18838
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-28683)
CVE-2021-28683
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)
CVE-2021-43824
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2022-29224)
CVE-2022-29224
CWE-476
Medium
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)
CVE-2024-23327
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-45809)
CVE-2024-45809
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-53270)
CVE-2024-53270
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
CVE-2025-62409
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-64527)
CVE-2025-64527
CWE-476
Medium
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47204)
CVE-2026-47204
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47220)
CVE-2026-47220
CWE-476
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
CVE-2026-47221
CWE-476
High
Envoy Proxy Off-by-one Error Vulnerability (CVE-2026-26309)
CVE-2026-26309
CWE-193
Medium
Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104)
CVE-2020-15104
CWE-346
Medium
Envoy Proxy Other Vulnerability (CVE-2020-25017)
CVE-2020-25017
-
High
Envoy Proxy Other Vulnerability (CVE-2024-34363)
CVE-2024-34363
-
High
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)
CVE-2019-18801
CWE-787
Critical
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364)
CVE-2024-34364
CWE-787
Medium
Envoy Proxy Overly Restrictive Regular Expression Vulnerability (CVE-2025-46821)
CVE-2025-46821
CWE-186
Medium
Envoy Proxy Protection Mechanism Failure Vulnerability (CVE-2025-64763)
CVE-2025-64763
CWE-693
Medium
Envoy Proxy Reachable Assertion Vulnerability (CVE-2021-29258)
CVE-2021-29258
CWE-617
High
Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228)
CVE-2022-29228
CWE-617
High
Envoy Proxy Reachable Assertion Vulnerability (CVE-2024-32475)
CVE-2024-32475
CWE-617
High
Envoy Proxy Uncontrolled Recursion Vulnerability (CVE-2022-23606)
CVE-2022-23606
CWE-674
Medium
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226)
CVE-2019-15226
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603)
CVE-2020-12603
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12605)
CVE-2020-12605
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-8663)
CVE-2020-8663
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2024-23323)
CVE-2024-23323
CWE-400
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2021-43825)
CVE-2021-43825
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2021-43826)
CVE-2021-43826
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2022-29227)
CVE-2022-29227
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2023-35942)
CVE-2023-35942
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2023-35943)
CVE-2023-35943
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2024-23322)
CVE-2024-23322
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2024-32974)
CVE-2024-32974
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2024-34362)
CVE-2024-34362
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2024-39305)
CVE-2024-39305
CWE-416
Critical
Envoy Proxy Use After Free Vulnerability (CVE-2025-54588)
CVE-2025-54588
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2025-62504)
CVE-2025-62504
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2026-26311)
CVE-2026-26311
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-26330)
CVE-2026-26330
CWE-416
High
Envoy Proxy Use After Free Vulnerability (CVE-2026-47205)
CVE-2026-47205
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47207)
CVE-2026-47207
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
Envoy Proxy Use of Incorrect Operator Vulnerability (CVE-2026-48497)
CVE-2026-48497
CWE-480
High
Envoy Proxy Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-9901)
CVE-2019-9901
CWE-706
Critical
Envoy Wrong DOWNSTREAM_REMOTE_ADDRESS logged Issue (CVE-2020-35470)
CVE-2020-35470
-
High
Error page path disclosure
-
CWE-200
Low
Error page web server version disclosure
-
CWE-200
Information
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-37094)
CVE-2020-37094
CWE-639
Critical
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-109957)
CVE-2026-109957
CWE-639
Medium
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33740)
CVE-2026-33740
CWE-639
Medium
EspoCRM Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-38846)
CVE-2022-38846
CWE-319
Medium
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-32789)
CVE-2025-32789
CWE-200
Low
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-109958)
CVE-2026-109958
CWE-200
Medium
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-109959)
CVE-2026-109959
CWE-200
Medium
EspoCRM Improper Authentication Vulnerability (CVE-2026-105832)
CVE-2026-105832
CWE-287
Medium
EspoCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7985)
CVE-2014-7985
CWE-22
Critical
EspoCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-33656)
CVE-2026-33656
CWE-22
Critical
EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38844)
CVE-2022-38844
CWE-1236
High