🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Critical Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Critical Severity Vulnerabilities
Found
1593 vulnerabilities
at
Critical
severity.
Vulnerability Name
CVE
CWE
Severity
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3546)
CVE-2009-3546
CWE-119
Critical
PHP Other Vulnerability (CVE-2009-4143)
CVE-2009-4143
-
Critical
Jetty Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-5047)
CVE-2009-5047
CWE-119
Critical
Oracle Database Server CVE-2010-0071 Vulnerability (CVE-2010-0071)
CVE-2010-0071
-
Critical
Apache HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425)
CVE-2010-0425
-
Critical
Oracle HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425)
CVE-2010-0425
-
Critical
IBMHttpServer CVE-2010-0425 Vulnerability (CVE-2010-0425)
CVE-2010-0425
-
Critical
Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)
CVE-2010-0840
-
Critical
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1165)
CVE-2010-1165
CWE-94
Critical
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-1433)
CVE-2010-1433
CWE-434
Critical
Joomla Incorrect Authorization Vulnerability (CVE-2010-1435)
CVE-2010-1435
CWE-863
Critical
PHP Integer Overflow or Wraparound Vulnerability (CVE-2010-1866)
CVE-2010-1866
CWE-190
Critical
Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2730)
CVE-2010-2730
CWE-119
Critical
Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-3972)
CVE-2010-3972
CWE-119
Critical
GlassFish CVE-2011-0807 Vulnerability (CVE-2011-0807)
CVE-2011-0807
-
Critical
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2011-1134)
CVE-2011-1134
CWE-434
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-1151)
CVE-2011-1151
CWE-138
Critical
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-1939)
CVE-2011-1939
CWE-138
Critical
SharePoint Improper Input Validation Vulnerability (CVE-2011-1989)
CVE-2011-1989
CWE-20
Critical
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2715)
CVE-2011-2715
CWE-138
Critical
Elgg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2936)
CVE-2011-2936
CWE-138
Critical
WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122)
CVE-2011-3122
-
Critical
WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125)
CVE-2011-3125
-
Critical
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3129)
CVE-2011-3129
CWE-264
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-3268)
CVE-2011-3268
CWE-119
Critical
Oracle JRE CVE-2011-3544 Vulnerability (CVE-2011-3544)
CVE-2011-3544
-
Critical
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3583)
CVE-2011-3583
CWE-138
Critical
Plone CMS CVE-2011-3587 Vulnerability (CVE-2011-3587)
CVE-2011-3587
-
Critical
Zope Web Application Server CVE-2011-3587 Vulnerability (CVE-2011-3587)
CVE-2011-3587
-
Critical
Vanilla Forums Other Vulnerability (CVE-2011-3614)
CVE-2011-3614
-
Critical
FluxBB CVE-2011-3621 Vulnerability (CVE-2011-3621)
CVE-2011-3621
-
Critical
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4030)
CVE-2011-4030
CWE-264
Critical
OpenSSL Resource Management Errors Vulnerability (CVE-2011-4109)
CVE-2011-4109
-
Critical
Ruby Inadequate Encryption Strength Vulnerability (CVE-2011-4121)
CVE-2011-4121
CWE-326
Critical
TYPO3 Improper Authentication Vulnerability (CVE-2011-4628)
CVE-2011-4628
CWE-287
Critical
MyBB CVE-2011-5133 Vulnerability (CVE-2011-5133)
CVE-2011-5133
-
Critical
Oracle JRE CVE-2012-0497 Vulnerability (CVE-2012-0497)
CVE-2012-0497
-
Critical
Oracle JRE CVE-2012-0498 Vulnerability (CVE-2012-0498)
CVE-2012-0498
-
Critical
Oracle JRE CVE-2012-0499 Vulnerability (CVE-2012-0499)
CVE-2012-0499
-
Critical
Oracle JRE CVE-2012-0500 Vulnerability (CVE-2012-0500)
CVE-2012-0500
-
Critical
Oracle JRE CVE-2012-0504 Vulnerability (CVE-2012-0504)
CVE-2012-0504
-
Critical
Oracle JRE CVE-2012-0507 Vulnerability (CVE-2012-0507)
CVE-2012-0507
-
Critical
Oracle Database Server CVE-2012-0552 Vulnerability (CVE-2012-0552)
CVE-2012-0552
-
Critical
SugarCRM Improper Input Validation Vulnerability (CVE-2012-0694)
CVE-2012-0694
CWE-20
Critical
Oracle JRE CVE-2012-1531 Vulnerability (CVE-2012-1531)
CVE-2012-1531
-
Critical
Oracle JRE CVE-2012-1532 Vulnerability (CVE-2012-1532)
CVE-2012-1532
-
Critical
Oracle JRE CVE-2012-1533 Vulnerability (CVE-2012-1533)
CVE-2012-1533
-
Critical
Oracle JRE CVE-2012-1541 Vulnerability (CVE-2012-1541)
CVE-2012-1541
-
Critical
Oracle JRE CVE-2012-1682 Vulnerability (CVE-2012-1682)
CVE-2012-1682
-
Critical
Oracle JRE CVE-2012-1716 Vulnerability (CVE-2012-1716)
CVE-2012-1716
-
Critical
Oracle JRE CVE-2012-1723 Vulnerability (CVE-2012-1723)
CVE-2012-1723
-
Critical
Oracle JRE CVE-2012-1725 Vulnerability (CVE-2012-1725)
CVE-2012-1725
-
Critical
PHP Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2012-1823)
CVE-2012-1823
CWE-138
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2376)
CVE-2012-2376
CWE-119
Critical
WordPress CVE-2012-2399 Vulnerability (CVE-2012-2399)
CVE-2012-2399
-
Critical
WordPress CVE-2012-2400 Vulnerability (CVE-2012-2400)
CVE-2012-2400
-
Critical
PHP CVE-2012-2688 Vulnerability (CVE-2012-2688)
CVE-2012-2688
-
Critical
MySQL CVE-2012-2750 Vulnerability (CVE-2012-2750)
CVE-2012-2750
-
Critical
Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926)
CVE-2012-2926
-
Critical
Oracle JRE CVE-2012-3136 Vulnerability (CVE-2012-3136)
CVE-2012-3136
-
Critical
Oracle JRE CVE-2012-3143 Vulnerability (CVE-2012-3143)
CVE-2012-3143
-
Critical
MySQL CVE-2012-3163 Vulnerability (CVE-2012-3163)
CVE-2012-3163
-
Critical
Oracle JRE Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3174)
CVE-2012-3174
CWE-264
Critical
Oracle JRE CVE-2012-3213 Vulnerability (CVE-2012-3213)
CVE-2012-3213
-
Critical
Oracle Database Server CVE-2012-3220 Vulnerability (CVE-2012-3220)
CVE-2012-3220
-
Critical
Oracle JRE CVE-2012-3342 Vulnerability (CVE-2012-3342)
CVE-2012-3342
-
Critical
Oracle JRE CVE-2012-4681 Vulnerability (CVE-2012-4681)
CVE-2012-4681
-
Critical
Oracle JRE CVE-2012-5076 Vulnerability (CVE-2012-5076)
CVE-2012-5076
-
Critical
Oracle JRE CVE-2012-5083 Vulnerability (CVE-2012-5083)
CVE-2012-5083
-
Critical
Oracle JRE CVE-2012-5086 Vulnerability (CVE-2012-5086)
CVE-2012-5086
-
Critical
Oracle JRE CVE-2012-5087 Vulnerability (CVE-2012-5087)
CVE-2012-5087
-
Critical
Oracle JRE CVE-2012-5088 Vulnerability (CVE-2012-5088)
CVE-2012-5088
-
Critical
IBMHttpServer CVE-2012-5955 Vulnerability (CVE-2012-5955)
CVE-2012-5955
-
Critical
Ruby on Rails CVE-2013-0277 Vulnerability (CVE-2013-0277)
CVE-2013-0277
-
Critical
Oracle JRE Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0422)
CVE-2013-0422
CWE-264
Critical
« Previous
1
...
3
4
5
6
7
8
9
10
...
22
Next »