🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ High Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
High Severity Vulnerabilities
Found
13053 vulnerabilities
at
High
severity.
Vulnerability Name
CVE
CWE
Severity
Magento CVE-2019-8111 Vulnerability (CVE-2019-8111)
CVE-2019-8111
-
High
Magento Insufficient Verification of Data Authenticity Vulnerability (CVE-2019-8112)
CVE-2019-8112
CWE-345
High
Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-8114)
CVE-2019-8114
CWE-434
High
Magento Session Fixation Vulnerability (CVE-2019-8116)
CVE-2019-8116
CWE-384
High
Magento CVE-2019-8119 Vulnerability (CVE-2019-8119)
CVE-2019-8119
-
High
Magento CVE-2019-8122 Vulnerability (CVE-2019-8122)
CVE-2019-8122
-
High
Magento Insufficient Verification of Data Authenticity Vulnerability (CVE-2019-8124)
CVE-2019-8124
CWE-345
High
Magento CVE-2019-8125 Vulnerability (CVE-2019-8125)
CVE-2019-8125
-
High
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8127)
CVE-2019-8127
CWE-138
High
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8130)
CVE-2019-8130
CWE-138
High
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8134)
CVE-2019-8134
CWE-138
High
Magento CVE-2019-8137 Vulnerability (CVE-2019-8137)
CVE-2019-8137
-
High
Magento Deserialization of Untrusted Data Vulnerability (CVE-2019-8141)
CVE-2019-8141
CWE-502
High
Magento CVE-2019-8150 Vulnerability (CVE-2019-8150)
CVE-2019-8150
-
High
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8151)
CVE-2019-8151
CWE-918
High
Magento Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2019-8154)
CVE-2019-8154
CWE-829
High
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8155)
CVE-2019-8155
CWE-352
High
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8156)
CVE-2019-8156
CWE-918
High
Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-8159)
CVE-2019-8159
CWE-138
High
Magento CVE-2019-8229 Vulnerability (CVE-2019-8229)
CVE-2019-8229
-
High
Magento CVE-2019-8230 Vulnerability (CVE-2019-8230)
CVE-2019-8230
-
High
Magento CVE-2019-8231 Vulnerability (CVE-2019-8231)
CVE-2019-8231
-
High
RubyGems Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8320)
CVE-2019-8320
CWE-22
High
RubyGems Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2019-8321)
CVE-2019-8321
CWE-707
High
RubyGems Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8322)
CVE-2019-8322
CWE-138
High
RubyGems Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8323)
CVE-2019-8323
CWE-138
High
RubyGems Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8324)
CVE-2019-8324
CWE-94
High
RubyGems Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8325)
CVE-2019-8325
CWE-138
High
Hiawatha Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8358)
CVE-2019-8358
CWE-22
High
Atlassian Jira CVE-2019-8442 Vulnerability (CVE-2019-8442)
CVE-2019-8442
-
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2019-8443)
CVE-2019-8443
CWE-287
High
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8942)
CVE-2019-8942
CWE-94
High
PHP Out-of-bounds Read Vulnerability (CVE-2019-9022)
CVE-2019-9022
CWE-125
High
PHP Out-of-bounds Read Vulnerability (CVE-2019-9024)
CVE-2019-9024
CWE-125
High
PostgreSQL Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-9193)
CVE-2019-9193
CWE-138
High
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
CVE-2019-9511
CWE-770
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
CVE-2019-9511
CWE-770
High
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
CVE-2019-9511
CWE-770
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2019-9512)
CVE-2019-9512
CWE-400
High
Jboss EAP Other Vulnerability (CVE-2019-9513)
CVE-2019-9513
-
High
Apache Traffic Server Other Vulnerability (CVE-2019-9513)
CVE-2019-9513
-
High
Nginx Other Vulnerability (CVE-2019-9513)
CVE-2019-9513
-
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9514)
CVE-2019-9514
CWE-770
High
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9514)
CVE-2019-9514
CWE-770
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9515)
CVE-2019-9515
CWE-770
High
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9515)
CVE-2019-9515
CWE-770
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)
CVE-2019-9517
CWE-770
High
Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)
CVE-2019-9517
CWE-770
High
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)
CVE-2019-9517
CWE-770
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)
CVE-2019-9518
CWE-770
High
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)
CVE-2019-9518
CWE-770
High
Nexus Repository Manager Incorrect Default Permissions Vulnerability (CVE-2019-9630)
CVE-2019-9630
CWE-276
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-9637)
CVE-2019-9637
CWE-264
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9638)
CVE-2019-9638
CWE-119
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9639)
CVE-2019-9639
CWE-119
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9640)
CVE-2019-9640
CWE-119
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2019-9674)
CVE-2019-9674
CWE-400
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9675)
CVE-2019-9675
CWE-119
High
Joomla Missing Authorization Vulnerability (CVE-2019-9713)
CVE-2019-9713
CWE-862
High
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-9787)
CVE-2019-9787
CWE-352
High
phpBB Improper Input Validation Vulnerability (CVE-2019-9826)
CVE-2019-9826
CWE-20
High
Envoy Proxy Improper Input Validation Vulnerability (CVE-2019-9900)
CVE-2019-9900
CWE-20
High
Sqlite Out-of-bounds Read Vulnerability (CVE-2019-9936)
CVE-2019-9936
CWE-125
High
Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-9937)
CVE-2019-9937
CWE-476
High
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2020-0618)
CVE-2020-0618
-
High
Apache Tomcat CVE-2020-0822 Vulnerability (CVE-2020-0822)
CVE-2020-0822
-
High
SharePoint CVE-2020-0850 Vulnerability (CVE-2020-0850)
CVE-2020-0850
-
High
SharePoint CVE-2020-0852 Vulnerability (CVE-2020-0852)
CVE-2020-0852
-
High
SharePoint CVE-2020-0892 Vulnerability (CVE-2020-0892)
CVE-2020-0892
-
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0920)
CVE-2020-0920
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0929)
CVE-2020-0929
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0931)
CVE-2020-0931
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0932)
CVE-2020-0932
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0971)
CVE-2020-0971
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0974)
CVE-2020-0974
CWE-434
High
« Previous
1
...
38
39
40
41
42
43
44
45
...
175
Next »