Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Mailman Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15011)
CVE-2020-15011
CWE-138
Medium
Mailman Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2025-43920)
CVE-2025-43920
CWE-138
High
Mailman Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2021-42096)
CVE-2021-42096
CWE-307
Medium
Mailman Incorrect Authorization Vulnerability (CVE-2025-43921)
CVE-2025-43921
CWE-863
Medium
Mailman Insufficiently Protected Credentials Vulnerability (CVE-2021-43332)
CVE-2021-43332
CWE-522
Medium
Mailman Other Vulnerability (CVE-2000-0861)
CVE-2000-0861
-
High
Mailman Other Vulnerability (CVE-2001-0290)
CVE-2001-0290
-
Medium
Mailman Other Vulnerability (CVE-2001-0884)
CVE-2001-0884
-
Medium
Mailman Other Vulnerability (CVE-2001-1132)
CVE-2001-1132
-
High
Mailman Other Vulnerability (CVE-2002-0388)
CVE-2002-0388
-
High
Mailman Other Vulnerability (CVE-2002-0389)
CVE-2002-0389
-
Low
Mailman Other Vulnerability (CVE-2002-0855)
CVE-2002-0855
-
High
Mailman Other Vulnerability (CVE-2003-0038)
CVE-2003-0038
-
Medium
Mailman Other Vulnerability (CVE-2003-0965)
CVE-2003-0965
-
Medium
Mailman Other Vulnerability (CVE-2003-0991)
CVE-2003-0991
-
Medium
Mailman Other Vulnerability (CVE-2003-0992)
CVE-2003-0992
-
Medium
Mailman Other Vulnerability (CVE-2004-0182)
CVE-2004-0182
-
Medium
Mailman Other Vulnerability (CVE-2004-0412)
CVE-2004-0412
-
Medium
Mailman Other Vulnerability (CVE-2004-1143)
CVE-2004-1143
-
High
Mailman Other Vulnerability (CVE-2004-1177)
CVE-2004-1177
-
Medium
Mailman Other Vulnerability (CVE-2005-0080)
CVE-2005-0080
-
Medium
Mailman Other Vulnerability (CVE-2005-0202)
CVE-2005-0202
-
Medium
Mailman Other Vulnerability (CVE-2005-3573)
CVE-2005-3573
-
Medium
Mailman Other Vulnerability (CVE-2005-4153)
CVE-2005-4153
-
High
Mailman Other Vulnerability (CVE-2006-0052)
CVE-2006-0052
-
Medium
Mailman Other Vulnerability (CVE-2006-1712)
CVE-2006-1712
-
Low
Mailman Other Vulnerability (CVE-2006-2191)
CVE-2006-2191
-
High
Mailman Other Vulnerability (CVE-2006-3636)
CVE-2006-3636
-
Medium
Malware Identified
-
-
High
Malware Identified (SB)
-
CWE-506
Critical
ManageEngine ADSelfService Plus Authentication Bypass (CVE-2021-40539)
CVE-2021-40539
CWE-287
High
ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189)
CVE-2020-10189
CWE-502
High
MantisBT multiple security issues
CVE-2015-1042
CWE-200
High
markdown-it Improper Access Control Vulnerability (CVE-2015-3295)
CVE-2015-3295
CWE-284
Medium
markdown-it Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-7969)
CVE-2025-7969
CWE-707
Medium
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2015-10005)
CVE-2015-10005
CWE-1333
High
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2022-21670)
CVE-2022-21670
CWE-1333
Medium
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2026-2327)
CVE-2026-2327
CWE-1333
High
markdown-it Uncontrolled Resource Consumption Vulnerability (CVE-2026-48988)
CVE-2026-48988
CWE-400
Medium
Masa CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-32641)
CVE-2024-32641
CWE-94
Critical
Masa CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-42183)
CVE-2021-42183
CWE-22
High
Masa CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-66492)
CVE-2025-66492
CWE-707
Medium
Masa CMS Incorrect Authorization Vulnerability (CVE-2022-47002)
CVE-2022-47002
CWE-863
Critical
Masa CMS Incorrect Authorization Vulnerability (CVE-2024-32643)
CVE-2024-32643
CWE-863
High
Masa CMS Origin Validation Error Vulnerability (CVE-2024-32642)
CVE-2024-32642
CWE-346
High
math.js Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1001002)
CVE-2017-1001002
CWE-94
Critical
math.js Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2020-7743)
CVE-2020-7743
CWE-915
High
math.js Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-40897)
CVE-2026-40897
CWE-915
High
math.js Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2026-41139)
CVE-2026-41139
CWE-915
High
MathJax Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1999024)
CVE-2018-1999024
CWE-707
Medium
MathJax Inefficient Regular Expression Complexity Vulnerability (CVE-2023-39663)
CVE-2023-39663
CWE-1333
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41799)
CVE-2021-41799
CWE-770
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41800)
CVE-2021-41800
CWE-770
Medium
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-34750)
CVE-2022-34750
CWE-770
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-45371)
CVE-2023-45371
CWE-770
High
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
CVE-2026-58517
CWE-288
Medium
MediaWiki chunked uploads security issue
CVE-2013-2114
CWE-434
High
MediaWiki Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-2243)
CVE-2014-2243
CWE-362
Medium
MediaWiki Credentials Management Errors Vulnerability (CVE-2015-8009)
CVE-2015-8009
-
Critical
MediaWiki Credentials Management Errors Vulnerability (CVE-2015-8626)
CVE-2015-8626
-
Critical
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5252)
CVE-2008-5252
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1150)
CVE-2010-1150
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1648)
CVE-2010-1648
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1578)
CVE-2012-1578
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1580)
CVE-2012-1580
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5394)
CVE-2012-5394
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)
CVE-2013-4306
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3454)
CVE-2014-3454
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3455)
CVE-2014-3455
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5241)
CVE-2014-5241
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9276)
CVE-2014-9276
CWE-352
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-6728)
CVE-2015-6728
CWE-352
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8623)
CVE-2015-8623
CWE-352
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8624)
CVE-2015-8624
CWE-352
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-0362)
CVE-2017-0362
CWE-352
High