Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
Oracle JRE CVE-2017-10388 Vulnerability (CVE-2017-10388)
CVE-2017-10388
-
High
GlassFish CVE-2017-10391 Vulnerability (CVE-2017-10391)
CVE-2017-10391
-
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10678)
CVE-2017-10678
CWE-352
High
Piwigo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10679)
CVE-2017-10679
CWE-200
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10680)
CVE-2017-10680
CWE-352
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10681)
CVE-2017-10681
CWE-352
High
Ruby Improper Authentication Vulnerability (CVE-2017-10784)
CVE-2017-10784
CWE-287
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-10839)
CVE-2017-10839
CWE-138
High
Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-10993)
CVE-2017-10993
CWE-22
High
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-11142)
CVE-2017-11142
CWE-400
High
PHP Deserialization of Untrusted Data Vulnerability (CVE-2017-11143)
CVE-2017-11143
CWE-502
High
PHP Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2017-11144)
CVE-2017-11144
CWE-754
High
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-11145)
CVE-2017-11145
CWE-200
High
Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364)
CVE-2017-11364
CWE-295
High
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)
CVE-2017-11466
CWE-434
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-11628)
CVE-2017-11628
CWE-119
High
ZenCart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-11675)
CVE-2017-11675
CWE-94
High
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165)
CVE-2017-12165
CWE-444
High
Undertow Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165)
CVE-2017-12165
CWE-444
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2017-12174)
CVE-2017-12174
CWE-400
High
Jboss EAP CVE-2017-12189 Vulnerability (CVE-2017-12189)
CVE-2017-12189
-
High
Varnish Cache Integer Overflow or Wraparound Vulnerability (CVE-2017-12425)
CVE-2017-12425
CWE-190
High
Apache Tomcat Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12615)
CVE-2017-12615
CWE-434
High
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12616)
CVE-2017-12616
CWE-200
High
Apache Tomcat Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12617)
CVE-2017-12617
CWE-434
High
Jboss EAP Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12617)
CVE-2017-12617
CWE-434
High
Question2Answer Improper Input Validation Vulnerability (CVE-2017-12775)
CVE-2017-12775
CWE-20
High
Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12837)
CVE-2017-12837
CWE-119
High
PHP Use After Free Vulnerability (CVE-2017-12934)
CVE-2017-12934
CWE-416
High
Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-14033)
CVE-2017-14033
CWE-119
High
MongoDb Out-of-bounds Read Vulnerability (CVE-2017-14227)
CVE-2017-14227
CWE-125
High
Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-14240)
CVE-2017-14240
CWE-200
High
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-14251)
CVE-2017-14251
CWE-434
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14508)
CVE-2017-14508
CWE-138
High
SugarCRM Improper Input Validation Vulnerability (CVE-2017-14509)
CVE-2017-14509
CWE-20
High
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14719)
CVE-2017-14719
CWE-22
High
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14722)
CVE-2017-14722
CWE-22
High
PostgreSQL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2017-14798)
CVE-2017-14798
CWE-362
High
Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14868)
CVE-2017-14868
CWE-611
High
Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14949)
CVE-2017-14949
CWE-611
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15098)
CVE-2017-15098
CWE-200
High
Sqlite NULL Pointer Dereference Vulnerability (CVE-2017-15286)
CVE-2017-15286
CWE-476
High
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2017-15710)
CVE-2017-15710
CWE-787
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-15715)
CVE-2017-15715
CWE-20
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15729)
CVE-2017-15729
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15730)
CVE-2017-15730
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15731)
CVE-2017-15731
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15732)
CVE-2017-15732
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15733)
CVE-2017-15733
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15734)
CVE-2017-15734
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15735)
CVE-2017-15735
CWE-352
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15808)
CVE-2017-15808
CWE-352
High
D3.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16044)
CVE-2017-16044
CWE-200
High
PHP Out-of-bounds Read Vulnerability (CVE-2017-16642)
CVE-2017-16642
CWE-125
High
Roundcube Files or Directories Accessible to External Parties Vulnerability (CVE-2017-16651)
CVE-2017-16651
CWE-552
High
Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-16877)
CVE-2017-16877
CWE-22
High
WordPress Use of Insufficiently Random Values Vulnerability (CVE-2017-17091)
CVE-2017-17091
CWE-330
High
Ruby Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-17405)
CVE-2017-17405
CWE-138
High
Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2017-17522)
CVE-2017-17522
CWE-138
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17774)
CVE-2017-17774
CWE-352
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-17827)
CVE-2017-17827
CWE-352
High
Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-17898)
CVE-2017-17898
CWE-200
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17916)
CVE-2017-17916
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17917)
CVE-2017-17917
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17919)
CVE-2017-17919
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17920)
CVE-2017-17920
CWE-138
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-18113)
CVE-2017-18113
CWE-94
High
Moment.js Uncontrolled Resource Consumption Vulnerability (CVE-2017-18214)
CVE-2017-18214
CWE-400
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-18260)
CVE-2017-18260
CWE-138
High
Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375)
CVE-2017-18375
CWE-502
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-1103)
CVE-2017-1103
CWE-611
High
IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2017-1701)
CVE-2017-1701
CWE-326
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-20030)
CVE-2017-20030
CWE-138
High
Python Uncontrolled Search Path Element Vulnerability (CVE-2017-20052)
CVE-2017-20052
CWE-427
High
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-2608)
CVE-2017-2608
CWE-502
High