Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

High Severity Vulnerabilities

Found 13355 vulnerabilities at High severity.

Vulnerability Name
CVE
CWE
Severity
Next.js Improper Authorization Vulnerability (CVE-2026-64642)
CVE-2026-64642
CWE-285
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-64901)
CVE-2026-64901
CWE-502
High
SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-64921)
CVE-2026-64921
CWE-306
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-65324)
CVE-2026-65324
CWE-400
High
Artifactory Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-65616)
CVE-2026-65616
CWE-347
High
Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2026-65617)
CVE-2026-65617
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65658)
CVE-2026-65658
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65663)
CVE-2026-65663
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65665)
CVE-2026-65665
CWE-502
High
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65898)
CVE-2026-65898
CWE-707
High
Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-65921)
CVE-2026-65921
CWE-22
High
Artifactory Improper Privilege Management Vulnerability (CVE-2026-66015)
CVE-2026-66015
CWE-269
High
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026-66299)
CVE-2026-66299
CWE-400
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66805)
CVE-2026-66805
CWE-502
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-66808)
CVE-2026-66808
CWE-502
High
PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-6464)
CVE-2026-6464
CWE-829
High
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6471)
CVE-2026-6471
CWE-862
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-6473)
CVE-2026-6473
CWE-190
High
PostgreSQL UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-6475)
CVE-2026-6475
CWE-61
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6476)
CVE-2026-6476
CWE-138
High
PostgreSQL Use of Inherently Dangerous Function Vulnerability (CVE-2026-6477)
CVE-2026-6477
CWE-242
High
PostgreSQL Uncontrolled Recursion Vulnerability (CVE-2026-6479)
CVE-2026-6479
CWE-674
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)
CVE-2026-6553
CWE-312
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6637)
CVE-2026-6637
CWE-138
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6638)
CVE-2026-6638
CWE-138
High
MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914)
CVE-2026-6914
CWE-191
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-70321)
CVE-2026-70321
CWE-502
High
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-70324)
CVE-2026-70324
CWE-918
High
SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-70326)
CVE-2026-70326
CWE-918
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-70355)
CVE-2026-70355
CWE-707
High
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71062)
CVE-2026-71062
CWE-284
High
PHP Out-of-bounds Read Vulnerability (CVE-2026-7258)
CVE-2026-7258
CWE-125
High
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7262)
CVE-2026-7262
CWE-476
High
PHP Improper Resource Shutdown or Release Vulnerability (CVE-2026-7263)
CVE-2026-7263
CWE-404
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2026-7383)
CVE-2026-7383
CWE-787
High
PHP Out-of-bounds Read Vulnerability (CVE-2026-7568)
CVE-2026-7568
CWE-125
High
Coppermine Cross Site Scripting Vulnerability (CVE-2026-82482)
CVE-2026-82482
-
High
MongoDb Out-of-bounds Write Vulnerability (CVE-2026-8053)
CVE-2026-8053
CWE-787
High
MongoDb Use After Free Vulnerability (CVE-2026-8201)
CVE-2026-8201
CWE-416
High
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-8609)
CVE-2026-8609
CWE-400
High
MOVEit Transfer Relative Path Traversal Vulnerability (CVE-2026-8650)
CVE-2026-8650
CWE-23
High
MOVEit Transfer Authentication Bypass by Spoofing Vulnerability (CVE-2026-8651)
CVE-2026-8651
CWE-290
High
MOVEit Transfer Incorrect Authorization Vulnerability (CVE-2026-8800)
CVE-2026-8800
CWE-863
High
IBMHttpServer Heap-based Buffer Overflow Vulnerability (CVE-2026-8834)
CVE-2026-8834
CWE-122
High
IBMHttpServer Untrusted Pointer Dereference Vulnerability (CVE-2026-8835)
CVE-2026-8835
CWE-822
High
IBMHttpServer NULL Pointer Dereference Vulnerability (CVE-2026-8850)
CVE-2026-8850
CWE-476
High
IBMHttpServer Reachable Assertion Vulnerability (CVE-2026-8852)
CVE-2026-8852
CWE-617
High
IBMHttpServer Expired Pointer Dereference Vulnerability (CVE-2026-8854)
CVE-2026-8854
CWE-825
High
MediaWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8857)
CVE-2026-8857
CWE-94
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-9076)
CVE-2026-9076
CWE-125
High
IBMHttpServer Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-9170)
CVE-2026-9170
CWE-94
High
MongoDb Uncontrolled Recursion Vulnerability (CVE-2026-9740)
CVE-2026-9740
CWE-674
High
MongoDb Out-of-bounds Write Vulnerability (CVE-2026-9753)
CVE-2026-9753
CWE-787
High
WordPress 0.7 Posts SQL Injection Vulnerability (0.7)
CVE-2003-1598
CWE-89
High
WordPress 'blog.header.php' Multiple SQL Injection Vulnerabilities (0.6.2 - 0.71)
-
CWE-89
High
WordPress Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1 - 1.2.2)
-
CWE-89
High
WordPress Multiple Cross-Site Scripting Vulnerabilities (1.2 - 1.2.1)
-
CWE-79
High
WordPress 'wp-login.php' HTTP Response Splitting Vulnerability (1.2)
CVE-2004-1584
CWE-113
High
WordPress 1.5.1.2 Multiple Vulnerabilities (1.0 - 1.5.1.2)
CVE-2005-2110
CWE-702
High
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
CVE-2005-1810
CWE-89
High
WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3)
CVE-2005-2612
CWE-94
High
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
CVE-2005-1687
CWE-89
High
WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)
-
CWE-400
High
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
CVE-2006-2702
CWE-94
High
WordPress 2.0.3 Multiple Unspecified Security Vulnerabilities (2.0 - 2.0.3)
CVE-2006-4028
CWE-264
High
WordPress 2.0.4 Multiple Security Vulnerabilities (2.0.4)
CVE-2006-6017
CWE-400
High
WordPress 2.0.5 Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
CVE-2006-6808
CWE-79
High
WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
CVE-2007-0106
CWE-79
High
WordPress Comment Post Cross-Site Scripting Vulnerability (2.0)
CVE-2006-0733
CWE-79
High
WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)
-
CWE-79
High
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
CVE-2006-1796
CWE-79
High
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)
CVE-2006-3389
CWE-89
High
WordPress User-Agent SQL Injection Vulnerability (1.5.2)
CVE-2006-1012
CWE-89
High