Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Microsoft SQL Server Other Vulnerability (CVE-2002-0224)
CVE-2002-0224
-
Medium
Microsoft SQL Server Other Vulnerability (CVE-2002-0643)
CVE-2002-0643
-
Medium
Microsoft SQL Server Other Vulnerability (CVE-2002-0721)
CVE-2002-0721
-
Critical
Microsoft SQL Server Other Vulnerability (CVE-2002-1137)
CVE-2002-1137
-
High
Microsoft SQL Server Other Vulnerability (CVE-2002-1138)
CVE-2002-1138
-
High
Microsoft SQL Server Other Vulnerability (CVE-2002-1145)
CVE-2002-1145
-
Critical
Microsoft SQL Server Other Vulnerability (CVE-2002-1872)
CVE-2002-1872
-
Medium
Microsoft SQL Server Other Vulnerability (CVE-2003-0231)
CVE-2003-0231
-
Medium
Microsoft SQL Server Other Vulnerability (CVE-2003-0232)
CVE-2003-0232
-
High
Microsoft SQL Server Other Vulnerability (CVE-2004-1560)
CVE-2004-1560
-
Medium
Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2003-0230)
CVE-2003-0230
CWE-264
High
Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5090)
CVE-2007-5090
CWE-264
High
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2019-1068)
CVE-2019-1068
-
High
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2020-0618)
CVE-2020-0618
-
High
Minify arbitrary file disclosure
CVE-2013-6619
CWE-538
High
MinIO Information Disclosure (CVE-2023-28432)
CVE-2023-28432
CWE-200
High
Misconfigured Access-Control-Allow-Origin Header
-
CWE-942
Medium
Misfortune Cookie vulnerability
CVE-2014-9222
CWE-119
High
Missing Authentication Check in SAP Solution Manager
CVE-2020-6207
CWE-287
High
Missing Content-Type Header
-
CWE-358
Low
Missing object-src in CSP Declaration
-
CWE-942
Information
MobileIron Log4Shell RCE
CVE-2021-44228
CWE-78
High
MobileIron Remote Code Execution via LogService
CVE-2020-15505
CWE-78
High
mod_ssl Other Vulnerability (CVE-2002-0082)
CVE-2002-0082
-
High
mod_ssl Other Vulnerability (CVE-2004-0700)
CVE-2004-0700
-
High
MODX Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-8773)
CVE-2014-8773
CWE-352
Medium
MODX CVE-2017-7323 Vulnerability (CVE-2017-7323)
CVE-2017-7323
-
High
MODX Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-8775)
CVE-2014-8775
CWE-200
Medium
MODX Improper Certificate Validation Vulnerability (CVE-2017-7322)
CVE-2017-7322
CWE-295
High
MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7321)
CVE-2017-7321
CWE-94
Critical
MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7324)
CVE-2017-7324
CWE-94
Critical
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)
CVE-2010-5278
CWE-22
Medium
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10037)
CVE-2016-10037
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10038)
CVE-2016-10038
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10039)
CVE-2016-10039
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-8115)
CVE-2017-8115
CWE-22
Medium
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-9067)
CVE-2017-9067
CWE-22
High
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000208)
CVE-2018-1000208
CWE-22
High
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4883)
CVE-2010-4883
CWE-707
Low
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2080)
CVE-2014-2080
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)
CVE-2014-8774
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8992)
CVE-2014-8992
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6588)
CVE-2015-6588
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000223)
CVE-2017-1000223
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-11744)
CVE-2017-11744
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-7320)
CVE-2017-7320
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9068)
CVE-2017-9068
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9070)
CVE-2017-9070
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9071)
CVE-2017-9071
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-10382)
CVE-2018-10382
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20755)
CVE-2018-20755
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20756)
CVE-2018-20756
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20757)
CVE-2018-20757
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20758)
CVE-2018-20758
CWE-707
Medium
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311)
CVE-2014-2311
CWE-138
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2736)
CVE-2014-2736
CWE-138
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-1000067)
CVE-2017-1000067
CWE-138
High
MODX Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-25911)
CVE-2020-25911
CWE-611
Critical
MODX Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-1000207)
CVE-2018-1000207
CWE-732
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9069)
CVE-2017-9069
CWE-434
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1010123)
CVE-2019-1010123
CWE-434
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26149)
CVE-2022-26149
CWE-434
High
MoinMoin CVE-2012-6081 multiple arbitrary code execution vulnerabilities
CVE-2012-6081
CWE-434
High
Mojolicious weak secret key
-
CWE-1391
Medium
Moment.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-24785)
CVE-2022-24785
CWE-22
High
Moment.js Other Vulnerability (CVE-2022-31129)
CVE-2022-31129
-
High
Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2016-4055)
CVE-2016-4055
CWE-400
Medium
Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2017-18214)
CVE-2017-18214
CWE-400
High
MongoDB $where operator JavaScript injection
-
CWE-943
High
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2025-7259)
CVE-2025-7259
CWE-843
Medium
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-13066)
CVE-2026-13066
CWE-843
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-32036)
CVE-2021-32036
CWE-770
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13069)
CVE-2026-13069
CWE-770
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13074)
CVE-2026-13074
CWE-770
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13075)
CVE-2026-13075
CWE-770
Medium