Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Lighttpd Other Vulnerability (CVE-2005-0453)
CVE-2005-0453
-
Medium
Lighttpd Other Vulnerability (CVE-2006-0760)
CVE-2006-0760
-
Low
Lighttpd Other Vulnerability (CVE-2006-0814)
CVE-2006-0814
-
Medium
Lighttpd Other Vulnerability (CVE-2007-1869)
CVE-2007-1869
-
Medium
Lighttpd Other Vulnerability (CVE-2007-1870)
CVE-2007-1870
-
High
Lighttpd Other Vulnerability (CVE-2007-3946)
CVE-2007-3946
-
Medium
Lighttpd Other Vulnerability (CVE-2007-3947)
CVE-2007-3947
-
Medium
Lighttpd Other Vulnerability (CVE-2007-3948)
CVE-2007-3948
-
Medium
Lighttpd Other Vulnerability (CVE-2007-3949)
CVE-2007-3949
-
High
Lighttpd Other Vulnerability (CVE-2007-3950)
CVE-2007-3950
-
Medium
Lighttpd Other Vulnerability (CVE-2008-1531)
CVE-2008-1531
-
Medium
Lighttpd Other Vulnerability (CVE-2011-4362)
CVE-2011-4362
-
Medium
Lighttpd Out-of-bounds Write Vulnerability (CVE-2022-22707)
CVE-2022-22707
CWE-787
Medium
Lighttpd Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4559)
CVE-2013-4559
CWE-264
High
Lighttpd Resource Management Errors Vulnerability (CVE-2008-0983)
CVE-2008-0983
-
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2008-4298)
CVE-2008-4298
-
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2010-0295)
CVE-2010-0295
-
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2012-5533)
CVE-2012-5533
-
Medium
Lighttpd Uncontrolled Resource Consumption Vulnerability (CVE-2022-30780)
CVE-2022-30780
CWE-400
High
Lighttpd Use After Free Vulnerability (CVE-2013-4560)
CVE-2013-4560
CWE-416
Medium
lighttpd v1.4.34 SQL injection and path traversal
CVE-2014-2324
CWE-89
High
LimeSurvey Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-97685)
CVE-2026-97685
CWE-639
High
LimeSurvey Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-39063)
CVE-2024-39063
CWE-352
High
LimeSurvey CVE-2008-2570 Vulnerability (CVE-2008-2570)
CVE-2008-2570
-
Critical
LimeSurvey CVE-2009-1604 Vulnerability (CVE-2009-1604)
CVE-2009-1604
-
High
LimeSurvey CVE-2019-16176 Vulnerability (CVE-2019-16176)
CVE-2019-16176
-
Medium
LimeSurvey CVE-2019-16180 Vulnerability (CVE-2019-16180)
CVE-2019-16180
-
Medium
LimeSurvey CVE-2019-16181 Vulnerability (CVE-2019-16181)
CVE-2019-16181
-
Low
LimeSurvey Deserialization of Untrusted Data Vulnerability (CVE-2018-17057)
CVE-2018-17057
CWE-502
Critical
LimeSurvey Deserialization of Untrusted Data Vulnerability (CVE-2025-56422)
CVE-2025-56422
CWE-502
Critical
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3752)
CVE-2011-3752
CWE-200
Medium
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-7556)
CVE-2018-7556
CWE-200
Critical
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16177)
CVE-2019-16177
CWE-200
High
LimeSurvey Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-41076)
CVE-2025-41076
CWE-209
Medium
LimeSurvey Improper Certificate Validation Vulnerability (CVE-2019-16179)
CVE-2019-16179
CWE-295
Medium
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573)
CVE-2007-5573
CWE-94
Medium
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-42902)
CVE-2024-42902
CWE-94
High
LimeSurvey Improper Input Validation Vulnerability (CVE-2019-15640)
CVE-2019-15640
CWE-20
High
LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000659)
CVE-2018-1000659
CWE-22
High
LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-9960)
CVE-2019-9960
CWE-22
Critical
LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-11455)
CVE-2020-11455
CWE-22
Medium
LimeSurvey Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2025-41376)
CVE-2025-41376
CWE-707
Medium
LimeSurvey Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-16184)
CVE-2019-16184
CWE-1236
Critical
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2571)
CVE-2008-2571
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5256)
CVE-2011-5256
CWE-707
Low
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4995)
CVE-2012-4995
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5016)
CVE-2014-5016
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18358)
CVE-2017-18358
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17003)
CVE-2018-17003
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20322)
CVE-2018-20322
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16172)
CVE-2019-16172
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16173)
CVE-2019-16173
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16178)
CVE-2019-16178
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16182)
CVE-2019-16182
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17660)
CVE-2019-17660
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11456)
CVE-2020-11456
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16192)
CVE-2020-16192
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23710)
CVE-2020-23710
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25797)
CVE-2020-25797
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25798)
CVE-2020-25798
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25799)
CVE-2020-25799
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36993)
CVE-2020-36993
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42112)
CVE-2021-42112
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29710)
CVE-2022-29710
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-48010)
CVE-2022-48010
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44796)
CVE-2023-44796
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28709)
CVE-2024-28709
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28710)
CVE-2024-28710
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-42901)
CVE-2024-42901
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63238)
CVE-2025-63238
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-102626)
CVE-2026-102626
CWE-707
High
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-91775)
CVE-2026-91775
CWE-707
High
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-92730)
CVE-2026-92730
CWE-707
High
LimeSurvey Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-42903)
CVE-2024-42903
CWE-138
Medium
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vul (CVE-2026-50636)
CVE-2026-50636
CWE-138
High