Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Medium Severity Vulnerabilities

Found 8230 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7143)
CVE-2008-7143
CWE-200
Medium
Coppermine Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7186)
CVE-2008-7186
CWE-264
Medium
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7187)
CVE-2008-7187
CWE-200
Medium
GeoServer Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-7227)
CVE-2008-7227
CWE-119
Medium
Oracle Application Server CVE-2008-7234 Vulnerability (CVE-2008-7234)
CVE-2008-7234
-
Medium
Oracle Application Server CVE-2008-7235 Vulnerability (CVE-2008-7235)
CVE-2008-7235
-
Medium
Oracle Application Server CVE-2008-7236 Vulnerability (CVE-2008-7236)
CVE-2008-7236
-
Medium
Oracle Application Server CVE-2008-7237 Vulnerability (CVE-2008-7237)
CVE-2008-7237
-
Medium
MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-7247)
CVE-2008-7247
CWE-59
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2008-7248)
CVE-2008-7248
CWE-20
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2008-7270)
CVE-2008-7270
-
Medium
Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-0023)
CVE-2009-0023
CWE-119
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2009-0033)
CVE-2009-0033
CWE-20
Medium
Oracle Application Server Other Vulnerability (CVE-2009-0217)
CVE-2009-0217
-
Medium
TYPO3 Cryptographic Issues Vulnerability (CVE-2009-0255)
CVE-2009-0255
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0257)
CVE-2009-0257
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0413)
CVE-2009-0413
CWE-707
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-0499)
CVE-2009-0499
CWE-352
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0500)
CVE-2009-0500
CWE-707
Medium
Moodle CVE-2009-0501 Vulnerability (CVE-2009-0501)
CVE-2009-0501
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0502)
CVE-2009-0502
CWE-707
Medium
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-0580)
CVE-2009-0580
CWE-200
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-0590)
CVE-2009-0590
CWE-119
Medium
Ruby Improper Authentication Vulnerability (CVE-2009-0642)
CVE-2009-0642
CWE-287
Medium
Plone CMS Improper Authentication Vulnerability (CVE-2009-0662)
CVE-2009-0662
CWE-287
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0781)
CVE-2009-0781
CWE-707
Medium
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-0783)
CVE-2009-0783
CWE-200
Medium
OpenSSL Numeric Errors Vulnerability (CVE-2009-0789)
CVE-2009-0789
-
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-0815)
CVE-2009-0815
CWE-200
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0816)
CVE-2009-0816
CWE-707
Medium
MySQL Other Vulnerability (CVE-2009-0819)
CVE-2009-0819
-
Medium
PostgreSQL Resource Management Errors Vulnerability (CVE-2009-0922)
CVE-2009-0922
-
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0933)
CVE-2009-0933
CWE-707
Medium
Oracle Database Server CVE-2009-0972 Vulnerability (CVE-2009-0972)
CVE-2009-0972
-
Medium
Oracle Application Server CVE-2009-0974 Vulnerability (CVE-2009-0974)
CVE-2009-0974
-
Medium
Oracle Application Server CVE-2009-0983 Vulnerability (CVE-2009-0983)
CVE-2009-0983
-
Medium
Oracle Database Server CVE-2009-0987 Vulnerability (CVE-2009-0987)
CVE-2009-0987
-
Medium
Oracle Application Server CVE-2009-0989 Vulnerability (CVE-2009-0989)
CVE-2009-0989
-
Medium
Oracle Application Server CVE-2009-0990 Vulnerability (CVE-2009-0990)
CVE-2009-0990
-
Medium
Oracle Application Server CVE-2009-0994 Vulnerability (CVE-2009-0994)
CVE-2009-0994
-
Medium
Oracle Application Server CVE-2009-0996 Vulnerability (CVE-2009-0996)
CVE-2009-0996
-
Medium
Oracle Database Server CVE-2009-0997 Vulnerability (CVE-2009-0997)
CVE-2009-0997
-
Medium
Oracle Database Server CVE-2009-1007 Vulnerability (CVE-2009-1007)
CVE-2009-1007
-
Medium
Oracle Application Server CVE-2009-1008 Vulnerability (CVE-2009-1008)
CVE-2009-1008
-
Medium
Oracle Application Server CVE-2009-1009 Vulnerability (CVE-2009-1009)
CVE-2009-1009
-
Medium
Oracle Application Server CVE-2009-1010 Vulnerability (CVE-2009-1010)
CVE-2009-1010
-
Medium
Oracle Application Server CVE-2009-1011 Vulnerability (CVE-2009-1011)
CVE-2009-1011
-
Medium
Oracle Database Server CVE-2009-1015 Vulnerability (CVE-2009-1015)
CVE-2009-1015
-
Medium
Oracle Application Server CVE-2009-1017 Vulnerability (CVE-2009-1017)
CVE-2009-1017
-
Medium
Oracle Database Server CVE-2009-1018 Vulnerability (CVE-2009-1018)
CVE-2009-1018
-
Medium
Oracle Database Server CVE-2009-1021 Vulnerability (CVE-2009-1021)
CVE-2009-1021
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1047)
CVE-2009-1047
CWE-707
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-1148)
CVE-2009-1148
CWE-22
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1150)
CVE-2009-1150
CWE-707
Medium
Moodle Improper Input Validation Vulnerability (CVE-2009-1171)
CVE-2009-1171
CWE-20
Medium
Apache HTTP Server CVE-2009-1191 Vulnerability (CVE-2009-1191)
CVE-2009-1191
-
Medium
Apache HTTP Server Configuration Vulnerability (CVE-2009-1195)
CVE-2009-1195
-
Medium
PHP Other Vulnerability (CVE-2009-1271)
CVE-2009-1271
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2009-1272)
CVE-2009-1272
CWE-20
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-1280)
CVE-2009-1280
CWE-352
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-1377)
CVE-2009-1377
CWE-119
Medium
OpenSSL Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2009-1378)
CVE-2009-1378
CWE-401
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2009-1386)
CVE-2009-1386
CWE-476
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2009-1387)
CVE-2009-1387
CWE-476
Medium
OpenSSL Improper Authentication Vulnerability (CVE-2009-1390)
CVE-2009-1390
CWE-287
Medium
e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1409)
CVE-2009-1409
CWE-138
Medium
GlassFish Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1553)
CVE-2009-1553
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1575)
CVE-2009-1575
CWE-707
Medium
Drupal CVE-2009-1576 Vulnerability (CVE-2009-1576)
CVE-2009-1576
-
Medium
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-1621)
CVE-2009-1621
CWE-22
Medium
Ruby Numeric Errors Vulnerability (CVE-2009-1904)
CVE-2009-1904
-
Medium
Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1907)
CVE-2009-1907
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1938)
CVE-2009-1938
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1939)
CVE-2009-1939
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1940)
CVE-2009-1940
CWE-707
Medium