Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13053 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
PHP Other Vulnerability (CVE-2019-11044)
CVE-2019-11044
-
High
PHP Out-of-bounds Read Vulnerability (CVE-2019-11046)
CVE-2019-11046
CWE-125
High
Dolibarr CVE-2019-11200 Vulnerability (CVE-2019-11200)
CVE-2019-11200
-
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-11201)
CVE-2019-11201
CWE-94
High
ProjectSend Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11378)
CVE-2019-11378
CWE-434
High
Liferay Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-11444)
CVE-2019-11444
CWE-138
High
ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446)
CVE-2019-11446
CWE-434
High
CakePHP Deserialization of Untrusted Data Vulnerability (CVE-2019-11458)
CVE-2019-11458
CWE-502
High
ProjectSend Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-11492)
CVE-2019-11492
CWE-532
High
TYPO3 Improper Input Validation Vulnerability (CVE-2019-11832)
CVE-2019-11832
CWE-20
High
PHPFusion Code Execution Vulnerability (CVE-2019-12099)
CVE-2019-12099
-
High
ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12169)
CVE-2019-12169
CWE-434
High
ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-12170)
CVE-2019-12170
CWE-434
High
Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385)
CVE-2019-12385
CWE-138
High
Apache Tomcat Insufficiently Protected Credentials Vulnerability (CVE-2019-12418)
CVE-2019-12418
CWE-522
High
silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12437)
CVE-2019-12437
CWE-352
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-12466)
CVE-2019-12466
CWE-352
High
MediaWiki CVE-2019-12472 Vulnerability (CVE-2019-12472)
CVE-2019-12472
-
High
MediaWiki CVE-2019-12473 Vulnerability (CVE-2019-12473)
CVE-2019-12473
-
High
MediaWiki CVE-2019-12474 Vulnerability (CVE-2019-12474)
CVE-2019-12474
-
High
Squid Improper Input Validation Vulnerability (CVE-2019-12520)
CVE-2019-12520
CWE-20
High
Squid Out-of-bounds Write Vulnerability (CVE-2019-12527)
CVE-2019-12527
CWE-787
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12528)
CVE-2019-12528
CWE-200
High
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12830)
CVE-2019-12830
CWE-707
High
MyBB Improper Input Validation Vulnerability (CVE-2019-12831)
CVE-2019-12831
CWE-20
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-12854)
CVE-2019-12854
CWE-119
High
Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2019-12855)
CVE-2019-12855
CWE-295
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12872)
CVE-2019-12872
CWE-138
High
Python Files or Directories Accessible to External Parties Vulnerability (CVE-2019-13404)
CVE-2019-13404
CWE-552
High
PrestaShop Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-13461)
CVE-2019-13461
CWE-639
High
Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14232)
CVE-2019-14232
CWE-400
High
Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14233)
CVE-2019-14233
CWE-400
High
Django Uncontrolled Recursion Vulnerability (CVE-2019-14235)
CVE-2019-14235
CWE-674
High
Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-14322)
CVE-2019-14322
CWE-22
High
EspoCRM Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2019-14351)
CVE-2019-14351
CWE-307
High
Joomla CVE-2019-14654 Vulnerability (CVE-2019-14654)
CVE-2019-14654
-
High
osTicket Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2019-14749)
CVE-2019-14749
CWE-1236
High
Werkzeug WSGI Insufficient Entropy Vulnerability (CVE-2019-14806)
CVE-2019-14806
CWE-331
High
Jboss EAP Incorrect Authorization Vulnerability (CVE-2019-14843)
CVE-2019-14843
CWE-863
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
CVE-2019-14888
CWE-400
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
CVE-2019-14888
CWE-400
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-15001)
CVE-2019-15001
CWE-94
High
Grafana Missing Authentication for Critical Function Vulnerability (CVE-2019-15043)
CVE-2019-15043
CWE-306
High
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-15225)
CVE-2019-15225
CWE-770
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226)
CVE-2019-15226
CWE-400
High
Roundcube Unspesificed Vulnerability (CVE-2019-15237)
CVE-2019-15237
-
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-15588)
CVE-2019-15588
CWE-138
High
LimeSurvey Improper Input Validation Vulnerability (CVE-2019-15640)
CVE-2019-15640
CWE-20
High
Varnish Cache Reachable Assertion Vulnerability (CVE-2019-15892)
CVE-2019-15892
CWE-617
High
Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)
CVE-2019-15893
-
High
Python Out-of-bounds Read Vulnerability (CVE-2019-15903)
CVE-2019-15903
CWE-125
High
Python CVE-2019-16056 Vulnerability (CVE-2019-16056)
CVE-2019-16056
-
High
phpBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-16108)
CVE-2019-16108
CWE-94
High
LimeSurvey Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-16174)
CVE-2019-16174
CWE-611
High
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-16177)
CVE-2019-16177
CWE-200
High
LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16185)
CVE-2019-16185
CWE-276
High
LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16186)
CVE-2019-16186
CWE-276
High
LimeSurvey Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16187)
CVE-2019-16187
CWE-732
High
Ruby Improper Authentication Vulnerability (CVE-2019-16201)
CVE-2019-16201
CWE-287
High
Ruby Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-16255)
CVE-2019-16255
CWE-94
High
Pega Infinity Exposure of Resource to Wrong Sphere Vulnerability (CVE-2019-16387)
CVE-2019-16387
CWE-668
High
Nexus Repository Manager Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-16530)
CVE-2019-16530
CWE-434
High
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-16869)
CVE-2019-16869
CWE-444
High
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2019-16891)
CVE-2019-16891
CWE-502
High
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-16993)
CVE-2019-16993
CWE-352
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17292)
CVE-2019-17292
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17293)
CVE-2019-17293
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17294)
CVE-2019-17294
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17295)
CVE-2019-17295
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17296)
CVE-2019-17296
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17297)
CVE-2019-17297
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-17298)
CVE-2019-17298
CWE-138
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17299)
CVE-2019-17299
CWE-94
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17300)
CVE-2019-17300
CWE-94
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17301)
CVE-2019-17301
CWE-94
High