Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12675 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37148)
CVE-2021-37148
CWE-20
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37149)
CVE-2021-37149
CWE-20
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37150)
CVE-2021-37150
CWE-20
High
Dolibarr Incorrect Authorization Vulnerability (CVE-2021-37517)
CVE-2021-37517
CWE-863
High
Contao Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-37626)
CVE-2021-37626
CWE-94
High
Contao Improper Privilege Management Vulnerability (CVE-2021-37627)
CVE-2021-37627
CWE-269
High
Apache Traffic Server Improper Authentication Vulnerability (CVE-2021-38161)
CVE-2021-38161
CWE-287
High
Liferay Portal CVE-2021-38266 Vulnerability (CVE-2021-38266)
CVE-2021-38266
-
High
Liferay DXP CVE-2021-38266 Vulnerability (CVE-2021-38266)
CVE-2021-38266
-
High
Atlassian Jira Insufficient Session Expiration Vulnerability (CVE-2021-39113)
CVE-2021-39113
CWE-613
High
Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39114)
CVE-2021-39114
CWE-138
High
Atlassian Jira CVE-2021-39123 Vulnerability (CVE-2021-39123)
CVE-2021-39123
-
High
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39124)
CVE-2021-39124
CWE-352
High
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126)
CVE-2021-39126
CWE-352
High
Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-39128)
CVE-2021-39128
CWE-138
High
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-39162)
CVE-2021-39162
CWE-754
High
Envoy Proxy Excessive Iteration Vulnerability (CVE-2021-39204)
CVE-2021-39204
CWE-834
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)
CVE-2021-39206
CWE-863
High
Grafana Improper Authentication Vulnerability (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-3172)
CVE-2021-3172
CWE-732
High
ZenCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-3291)
CVE-2021-3291
CWE-138
High
OpenSSL Improper Certificate Validation Vulnerability (CVE-2021-3450)
CVE-2021-3450
CWE-295
High
WebLogic Improper Certificate Validation Vulnerability (CVE-2021-3450)
CVE-2021-3450
CWE-295
High
Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)
CVE-2021-3618
CWE-295
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
CVE-2021-3629
CWE-400
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
CVE-2021-3690
CWE-400
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2021-3712)
CVE-2021-3712
CWE-125
High
Jboss EAP Files or Directories Accessible to External Parties Vulnerability (CVE-2021-3717)
CVE-2021-3717
CWE-552
High
YOURLS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2021-3734)
CVE-2021-3734
CWE-1021
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3737)
CVE-2021-3737
CWE-400
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749)
CVE-2021-3749
CWE-400
High
Undertow Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
CVE-2021-3859
CWE-668
High
Jboss EAP Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
CVE-2021-3859
CWE-668
High
Elgg Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2021-3980)
CVE-2021-3980
CWE-359
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-40313)
CVE-2021-40313
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-40317)
CVE-2021-40317
CWE-138
High
SharePoint CVE-2021-40482 Vulnerability (CVE-2021-40482)
CVE-2021-40482
-
High
SharePoint CVE-2021-40487 Vulnerability (CVE-2021-40487)
CVE-2021-40487
-
High
Piwigo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-40553)
CVE-2021-40553
CWE-138
High
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-40662)
CVE-2021-40662
CWE-352
High
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-40690)
CVE-2021-40690
CWE-200
High
ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884)
CVE-2021-40884
CWE-863
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-41079)
CVE-2021-41079
CWE-835
High
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-41113)
CVE-2021-41113
CWE-352
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41305)
CVE-2021-41305
CWE-639
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306)
CVE-2021-41306
CWE-639
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307)
CVE-2021-41307
CWE-639
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)
CVE-2021-41312
CWE-287
High
SharePoint CVE-2021-41344 Vulnerability (CVE-2021-41344)
CVE-2021-41344
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-41524)
CVE-2021-41524
CWE-476
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-41585)
CVE-2021-41585
CWE-20
High
Squid Improper Certificate Validation Vulnerability (CVE-2021-41611)
CVE-2021-41611
CWE-295
High
Oracle HTTP Server Other Vulnerability (CVE-2021-41617)
CVE-2021-41617
-
High
Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)
CVE-2021-41773
CWE-22
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41799)
CVE-2021-41799
CWE-770
High
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-41801)
CVE-2021-41801
CWE-863
High
Ruby Other Vulnerability (CVE-2021-41817)
CVE-2021-41817
-
High
Ruby CVE-2021-41819 Vulnerability (CVE-2021-41819)
CVE-2021-41819
-
High
Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824)
CVE-2021-41824
CWE-1236
High
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-42040)
CVE-2021-42040
CWE-835
High
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-42097)
CVE-2021-42097
CWE-352
High
Masa CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-42183)
CVE-2021-42183
CWE-22
High
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)
CVE-2021-42340
CWE-772
High
Oracle HTTP Server Uncontrolled Recursion Vulnerability (CVE-2021-42717)
CVE-2021-42717
CWE-674
High
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43281)
CVE-2021-43281
CWE-94
High
jQuery Validation Other Vulnerability (CVE-2021-43306)
CVE-2021-43306
-
High
ATutor Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-43498)
CVE-2021-43498
CWE-640
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43559)
CVE-2021-43559
CWE-352
High
PostgreSQL Improper Certificate Validation Vulnerability (CVE-2021-43766)
CVE-2021-43766
CWE-295
High
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43798)
CVE-2021-43798
CWE-22
High
Next.js CVE-2021-43803 Vulnerability (CVE-2021-43803)
CVE-2021-43803
-
High
Oracle HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43818)
CVE-2021-43818
CWE-707
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)
CVE-2021-43824
CWE-476
High