🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Medium Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Medium Severity Vulnerabilities
Found
8734 vulnerabilities
at
Medium
severity.
Vulnerability Name
CVE
CWE
Severity
Apache Tomcat Configuration Vulnerability (CVE-2010-4312)
CVE-2010-4312
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4329)
CVE-2010-4329
CWE-707
Medium
PHP Numeric Errors Vulnerability (CVE-2010-4409)
CVE-2010-4409
-
Medium
Oracle Database Server CVE-2010-4413 Vulnerability (CVE-2010-4413)
CVE-2010-4413
-
Medium
Oracle Database Server CVE-2010-4421 Vulnerability (CVE-2010-4421)
CVE-2010-4421
-
Medium
Oracle Database Server CVE-2010-4423 Vulnerability (CVE-2010-4423)
CVE-2010-4423
-
Medium
GlassFish CVE-2010-4438 Vulnerability (CVE-2010-4438)
CVE-2010-4438
-
Medium
WebLogic CVE-2010-4453 Vulnerability (CVE-2010-4453)
CVE-2010-4453
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4480)
CVE-2010-4480
CWE-707
Medium
phpMyAdmin Improper Authentication Vulnerability (CVE-2010-4481)
CVE-2010-4481
CWE-287
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4522)
CVE-2010-4522
CWE-707
Medium
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4534)
CVE-2010-4534
CWE-264
Medium
Django Improper Input Validation Vulnerability (CVE-2010-4535)
CVE-2010-4535
CWE-20
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4536)
CVE-2010-4536
CWE-707
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-4625)
CVE-2010-4625
CWE-200
Medium
MyBB Cryptographic Issues Vulnerability (CVE-2010-4626)
CVE-2010-4626
-
Medium
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4627)
CVE-2010-4627
CWE-352
Medium
MyBB Other Vulnerability (CVE-2010-4628)
CVE-2010-4628
-
Medium
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4629)
CVE-2010-4629
CWE-264
Medium
osTicket Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-4634)
CVE-2010-4634
CWE-22
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4642)
CVE-2010-4642
CWE-707
Medium
PHP Numeric Errors Vulnerability (CVE-2010-4645)
CVE-2010-4645
-
Medium
PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4662)
CVE-2010-4662
CWE-707
Medium
Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4667)
CVE-2010-4667
CWE-707
Medium
Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4693)
CVE-2010-4693
CWE-707
Medium
PHP Resource Management Errors Vulnerability (CVE-2010-4697)
CVE-2010-4697
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-4698)
CVE-2010-4698
CWE-119
Medium
PHP Numeric Errors Vulnerability (CVE-2010-4699)
CVE-2010-4699
-
Medium
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4700)
CVE-2010-4700
CWE-138
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4710)
CVE-2010-4710
CWE-707
Medium
Zikula Cryptographic Issues Vulnerability (CVE-2010-4728)
CVE-2010-4728
-
Medium
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4729)
CVE-2010-4729
CWE-352
Medium
PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4748)
CVE-2010-4748
CWE-707
Medium
e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4757)
CVE-2010-4757
CWE-707
Medium
Perl Improper Input Validation Vulnerability (CVE-2010-4777)
CVE-2010-4777
CWE-20
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4821)
CVE-2010-4821
CWE-707
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-4822)
CVE-2010-4822
CWE-200
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4823)
CVE-2010-4823
CWE-707
Medium
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4824)
CVE-2010-4824
CWE-138
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4907)
CVE-2010-4907
CWE-707
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5078)
CVE-2010-5078
CWE-264
Medium
silverstripeCMS Cryptographic Issues Vulnerability (CVE-2010-5079)
CVE-2010-5079
-
Medium
silverstripeCMS Credentials Management Errors Vulnerability (CVE-2010-5080)
CVE-2010-5080
-
Medium
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5084)
CVE-2010-5084
CWE-352
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5087)
CVE-2010-5087
CWE-264
Medium
silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5088)
CVE-2010-5088
CWE-352
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5089)
CVE-2010-5089
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5090)
CVE-2010-5090
CWE-264
Medium
silverstripeCMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-5091)
CVE-2010-5091
CWE-94
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5093)
CVE-2010-5093
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5094)
CVE-2010-5094
CWE-264
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5095)
CVE-2010-5095
CWE-707
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099)
CVE-2010-5099
CWE-20
Medium
TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5101)
CVE-2010-5101
CWE-22
Medium
TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5102)
CVE-2010-5102
CWE-22
Medium
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-5103)
CVE-2010-5103
CWE-138
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5104)
CVE-2010-5104
CWE-200
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5106)
CVE-2010-5106
CWE-264
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5187)
CVE-2010-5187
CWE-200
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5188)
CVE-2010-5188
CWE-200
Medium
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)
CVE-2010-5278
CWE-22
Medium
Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5284)
CVE-2010-5284
CWE-707
Medium
Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285)
CVE-2010-5285
CWE-352
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)
CVE-2010-5293
CWE-264
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5294)
CVE-2010-5294
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5295)
CVE-2010-5295
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5296)
CVE-2010-5296
CWE-264
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-5298)
CVE-2010-5298
CWE-362
Medium
jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2011-0003)
CVE-2011-0003
CWE-20
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0013)
CVE-2011-0013
CWE-707
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2011-0014)
CVE-2011-0014
-
Medium
« Previous
1
...
21
22
23
24
25
26
27
28
...
117
Next »