Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

High Severity Vulnerabilities

Found 12791 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-35808)
CVE-2023-35808
CWE-434
High
SugarCRM CVE-2023-35809 Vulnerability (CVE-2023-35809)
CVE-2023-35809
-
High
SugarCRM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-35810)
CVE-2023-35810
CWE-138
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-35811)
CVE-2023-35811
CWE-138
High
Envoy Proxy Use After Free Vulnerability (CVE-2023-35943)
CVE-2023-35943
CWE-416
High
Envoy Proxy Incomplete Cleanup Vulnerability (CVE-2023-35945)
CVE-2023-35945
CWE-459
High
Django Inefficient Regular Expression Complexity Vulnerability (CVE-2023-36053)
CVE-2023-36053
CWE-1333
High
Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36260)
CVE-2023-36260
CWE-138
High
Microsoft SQL Server CVE-2023-36417 Vulnerability (CVE-2023-36417)
CVE-2023-36417
-
High
Microsoft SQL Server CVE-2023-36420 Vulnerability (CVE-2023-36420)
CVE-2023-36420
-
High
XWiki Incomplete Cleanup Vulnerability (CVE-2023-36468)
CVE-2023-36468
CWE-459
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36469)
CVE-2023-36469
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36470)
CVE-2023-36470
CWE-138
High
Jenkins Integer Overflow or Wraparound Vulnerability (CVE-2023-36478)
CVE-2023-36478
CWE-190
High
Jetty Integer Overflow or Wraparound Vulnerability (CVE-2023-36478)
CVE-2023-36478
CWE-190
High
Python Uncontrolled Recursion Vulnerability (CVE-2023-36632)
CVE-2023-36632
CWE-674
High
Microsoft SQL Server CVE-2023-36730 Vulnerability (CVE-2023-36730)
CVE-2023-36730
-
High
SharePoint CVE-2023-36762 Vulnerability (CVE-2023-36762)
CVE-2023-36762
-
High
SharePoint CVE-2023-36764 Vulnerability (CVE-2023-36764)
CVE-2023-36764
-
High
SharePoint CVE-2023-36891 Vulnerability (CVE-2023-36891)
CVE-2023-36891
-
High
SharePoint CVE-2023-36892 Vulnerability (CVE-2023-36892)
CVE-2023-36892
-
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-37270)
CVE-2023-37270
CWE-138
High
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-37462)
CVE-2023-37462
CWE-707
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37909)
CVE-2023-37909
CWE-94
High
XWiki Missing Authorization Vulnerability (CVE-2023-37910)
CVE-2023-37910
CWE-862
High
XWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-37913)
CVE-2023-37913
CWE-22
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37914)
CVE-2023-37914
CWE-94
High
CubeCart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-38130)
CVE-2023-38130
CWE-352
High
Microsoft SQL Server CVE-2023-38169 Vulnerability (CVE-2023-38169)
CVE-2023-38169
-
High
IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2023-38371)
CVE-2023-38371
CWE-327
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-38522)
CVE-2023-38522
-
High
Apache HTTP Server Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-38709)
CVE-2023-38709
CWE-1284
High
Dolibarr CVE-2023-38886 Vulnerability (CVE-2023-38886)
CVE-2023-38886
-
High
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-38887)
CVE-2023-38887
CWE-434
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39417)
CVE-2023-39417
CWE-138
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2023-39456)
CVE-2023-39456
CWE-20
High
PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39528)
CVE-2023-39528
CWE-22
High
MathJax Inefficient Regular Expression Complexity Vulnerability (CVE-2023-39663)
CVE-2023-39663
CWE-1333
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)
CVE-2023-3171
CWE-770
High
Undertow CVE-2023-3223 Vulnerability (CVE-2023-3223)
CVE-2023-3223
-
High
Jboss EAP CVE-2023-3223 Vulnerability (CVE-2023-3223)
CVE-2023-3223
-
High
PHP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-3823)
CVE-2023-3823
CWE-611
High
Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-40035)
CVE-2023-40035
CWE-138
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-40177)
CVE-2023-40177
CWE-94
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-40572)
CVE-2023-40572
CWE-352
High
XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573)
CVE-2023-40573
-
High
Joomla CVE-2023-40626 Vulnerability (CVE-2023-40626)
CVE-2023-40626
-
High
Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050)
CVE-2023-41050
CWE-200
High
Python Untrusted Search Path Vulnerability (CVE-2023-41105)
CVE-2023-41105
CWE-426
High
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-41164)
CVE-2023-41164
CWE-1284
High
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41362)
CVE-2023-41362
CWE-94
High
Apache Traffic Server CVE-2023-41752 Vulnerability (CVE-2023-41752)
CVE-2023-41752
-
High
GeoServer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-41877)
CVE-2023-41877
CWE-22
High
Artifactory Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-42509)
CVE-2023-42509
CWE-755
High
Artifactory CVE-2023-42661 Vulnerability (CVE-2023-42661)
CVE-2023-42661
-
High
Jenkins Incorrect Default Permissions Vulnerability (CVE-2023-43496)
CVE-2023-43496
CWE-276
High
Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-43497)
CVE-2023-43497
CWE-434
High
Jenkins CVE-2023-43498 Vulnerability (CVE-2023-43498)
CVE-2023-43498
-
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-43622)
CVE-2023-43622
CWE-400
High
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-43665)
CVE-2023-43665
CWE-1284
High
PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
CVE-2023-43784
CWE-668
High
PleskWin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
CVE-2023-43784
CWE-668
High
Apache Tomcat CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Open Resty Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Nginx Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Apache Traffic Server CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Caddy Web Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Jenkins CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Kong Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135)
CVE-2023-45135
CWE-116
High
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-45363)
CVE-2023-45363
CWE-835
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-45371)
CVE-2023-45371
CWE-770
High