Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-20187)
CVE-2021-20187
CWE-94
High
IBM WebSEAL Insufficiently Protected Credentials Vulnerability (CVE-2021-20439)
CVE-2021-20439
CWE-522
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502)
CVE-2021-20502
CWE-611
High
Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-21015)
CVE-2021-21015
CWE-138
High
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21030)
CVE-2021-21030
CWE-707
High
jQuery Validation Uncontrolled Resource Consumption Vulnerability (CVE-2021-21252)
CVE-2021-21252
CWE-400
High
PrestaShop Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-21302)
CVE-2021-21302
CWE-1236
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-21339)
CVE-2021-21339
CWE-312
High
TYPO3 Files or Directories Accessible to External Parties Vulnerability (CVE-2021-21355)
CVE-2021-21355
CWE-552
High
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21357)
CVE-2021-21357
CWE-434
High
TYPO3 Uncontrolled Recursion Vulnerability (CVE-2021-21359)
CVE-2021-21359
CWE-674
High
Envoy Proxy Improper Authentication Vulnerability (CVE-2021-21378)
CVE-2021-21378
CWE-287
High
XWiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-21380)
CVE-2021-21380
CWE-138
High
Ampache Improper Access Control Vulnerability (CVE-2021-21399)
CVE-2021-21399
CWE-284
High
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2021-21604)
CVE-2021-21604
CWE-502
High
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21605)
CVE-2021-21605
CWE-22
High
Jenkins Session Fixation Vulnerability (CVE-2021-21671)
CVE-2021-21671
CWE-384
High
Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21686)
CVE-2021-21686
CWE-59
High
Jenkins Missing Authorization Vulnerability (CVE-2021-21688)
CVE-2021-21688
CWE-862
High
Jenkins Missing Authorization Vulnerability (CVE-2021-21695)
CVE-2021-21695
CWE-862
High
PHP NULL Pointer Dereference Vulnerability (CVE-2021-21702)
CVE-2021-21702
CWE-476
High
PHP Out-of-bounds Write Vulnerability (CVE-2021-21703)
CVE-2021-21703
CWE-787
High
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2021-22880)
CVE-2021-22880
CWE-400
High
Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885)
CVE-2021-22885
CWE-209
High
Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)
CVE-2021-22902
-
High
Ruby on Rails Other Vulnerability (CVE-2021-22904)
CVE-2021-22904
-
High
ReviveAdserver Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-22948)
CVE-2021-22948
CWE-327
High
Nginx Off-by-one Error Vulnerability (CVE-2021-23017)
CVE-2021-23017
CWE-193
High
Open Resty Off-by-one Error Vulnerability (CVE-2021-23017)
CVE-2021-23017
CWE-193
High
Joomla Improper Input Validation Vulnerability (CVE-2021-23131)
CVE-2021-23131
CWE-20
High
Joomla CVE-2021-23132 Vulnerability (CVE-2021-23132)
CVE-2021-23132
-
High
Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-23163)
CVE-2021-23163
CWE-352
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-23214)
CVE-2021-23214
CWE-138
High
Lodash Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-23337)
CVE-2021-23337
CWE-138
High
Underscore.js Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-23358)
CVE-2021-23358
CWE-94
High
OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2021-23840)
CVE-2021-23840
CWE-190
High
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-25122)
CVE-2021-25122
CWE-200
High
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2021-25329)
CVE-2021-25329
CWE-502
High
Dolibarr Improper Authentication Vulnerability (CVE-2021-25956)
CVE-2021-25956
CWE-287
High
Dolibarr Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-25957)
CVE-2021-25957
CWE-640
High
Joomla Improper Input Validation Vulnerability (CVE-2021-26036)
CVE-2021-26036
CWE-20
High
Joomla Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-26038)
CVE-2021-26038
CWE-754
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-26070)
CVE-2021-26070
CWE-287
High
SharePoint CVE-2021-26418 Vulnerability (CVE-2021-26418)
CVE-2021-26418
-
High
SharePoint CVE-2021-26420 Vulnerability (CVE-2021-26420)
CVE-2021-26420
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-26690)
CVE-2021-26690
CWE-476
High
Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27116)
CVE-2021-27116
CWE-59
High
Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27117)
CVE-2021-27117
CWE-59
High
UAParser.js Other Vulnerability (CVE-2021-27292)
CVE-2021-27292
-
High
Kong Server Incorrect Authorization Vulnerability (CVE-2021-27306)
CVE-2021-27306
CWE-863
High
Grafana CVE-2021-27358 Vulnerability (CVE-2021-27358)
CVE-2021-27358
-
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-27577)
CVE-2021-27577
CWE-444
High
Pega Infinity Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-27654)
CVE-2021-27654
CWE-640
High
Apache Traffic Server Remote DOS Attack (CVE-2021-27737)
CVE-2021-27737
-
High
e107 Inadequate Encryption Strength Vulnerability (CVE-2021-27885)
CVE-2021-27885
CWE-326
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27890)
CVE-2021-27890
CWE-138
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27946)
CVE-2021-27946
CWE-138
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27947)
CVE-2021-27947
CWE-138
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27948)
CVE-2021-27948
CWE-138
High
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-27962)
CVE-2021-27962
CWE-732
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27973)
CVE-2021-27973
CWE-138
High
Grafana Improper Authentication Vulnerability (CVE-2021-28148)
CVE-2021-28148
CWE-287
High
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
CVE-2021-28165
CWE-400
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
CVE-2021-28165
CWE-400
High
b2evolution Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-28242)
CVE-2021-28242
CWE-138
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-28419)
CVE-2021-28419
CWE-138
High
SharePoint CVE-2021-28478 Vulnerability (CVE-2021-28478)
CVE-2021-28478
-
High
Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28584)
CVE-2021-28584
CWE-22
High
Squid Uncontrolled Resource Consumption Vulnerability (CVE-2021-28651)
CVE-2021-28651
CWE-400
High
Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682)
CVE-2021-28682
CWE-190
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-28683)
CVE-2021-28683
CWE-476
High
Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-28861)
CVE-2021-28861
CWE-601
High
Ruby Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-28965)
CVE-2021-28965
CWE-611
High
Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28966)
CVE-2021-28966
CWE-22
High
Liferay Portal Improper Authentication Vulnerability (CVE-2021-29047)
CVE-2021-29047
CWE-287
High