🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Medium Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Medium Severity Vulnerabilities
Found
8734 vulnerabilities
at
Medium
severity.
Vulnerability Name
CVE
CWE
Severity
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3181)
CVE-2011-3181
CWE-707
Medium
PHP Other Vulnerability (CVE-2011-3182)
CVE-2011-3182
-
Medium
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-3186)
CVE-2011-3186
CWE-94
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2011-3187)
CVE-2011-3187
CWE-20
Medium
PHP Cryptographic Issues Vulnerability (CVE-2011-3189)
CVE-2011-3189
-
Medium
Squid Other Vulnerability (CVE-2011-3205)
CVE-2011-3205
-
Medium
OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3207)
CVE-2011-3207
CWE-264
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2011-3210)
CVE-2011-3210
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2011-3267)
CVE-2011-3267
-
Medium
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2011-3348)
CVE-2011-3348
CWE-400
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3352)
CVE-2011-3352
CWE-707
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3368)
CVE-2011-3368
CWE-20
Medium
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3375)
CVE-2011-3375
CWE-200
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3376)
CVE-2011-3376
CWE-264
Medium
Oracle Database Server CVE-2011-3512 Vulnerability (CVE-2011-3512)
CVE-2011-3512
-
Medium
Oracle Database Server CVE-2011-3525 Vulnerability (CVE-2011-3525)
CVE-2011-3525
-
Medium
Oracle JRE CVE-2011-3546 Vulnerability (CVE-2011-3546)
CVE-2011-3546
-
Medium
Oracle JRE CVE-2011-3547 Vulnerability (CVE-2011-3547)
CVE-2011-3547
-
Medium
Oracle JRE CVE-2011-3563 Vulnerability (CVE-2011-3563)
CVE-2011-3563
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3595)
CVE-2011-3595
CWE-707
Medium
JBoss Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3606)
CVE-2011-3606
CWE-707
Medium
Apache HTTP Server Numeric Errors Vulnerability (CVE-2011-3607)
CVE-2011-3607
-
Medium
JBoss Application Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-3609)
CVE-2011-3609
CWE-352
Medium
Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2011-3624)
CVE-2011-3624
CWE-138
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3639)
CVE-2011-3639
CWE-20
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-3646)
CVE-2011-3646
CWE-20
Medium
ATutor Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3706)
CVE-2011-3706
CWE-200
Medium
b2evolution Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3709)
CVE-2011-3709
CWE-200
Medium
CakePHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3712)
CVE-2011-3712
CWE-200
Medium
Claroline Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3716)
CVE-2011-3716
CWE-200
Medium
ClipBucket Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3717)
CVE-2011-3717
CWE-200
Medium
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3722)
CVE-2011-3722
CWE-200
Medium
CubeCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3724)
CVE-2011-3724
CWE-200
Medium
Dolphin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3728)
CVE-2011-3728
CWE-200
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3730)
CVE-2011-3730
CWE-200
Medium
e107 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3731)
CVE-2011-3731
CWE-200
Medium
Elgg Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3733)
CVE-2011-3733
CWE-200
Medium
Frontaccounting Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3740)
CVE-2011-3740
CWE-200
Medium
Hesk Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3743)
CVE-2011-3743
CWE-200
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3747)
CVE-2011-3747
CWE-200
Medium
LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3752)
CVE-2011-3752
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3757)
CVE-2011-3757
CWE-200
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3759)
CVE-2011-3759
CWE-200
Medium
Opencart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3763)
CVE-2011-3763
CWE-200
Medium
phpMyFAQ Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3783)
CVE-2011-3783
CWE-200
Medium
Piwigo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3790)
CVE-2011-3790
CWE-200
Medium
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3796)
CVE-2011-3796
CWE-200
Medium
Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)
CVE-2011-3800
CWE-200
Medium
SugarCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3803)
CVE-2011-3803
CWE-200
Medium
TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3806)
CVE-2011-3806
CWE-200
Medium
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3812)
CVE-2011-3812
CWE-200
Medium
WeBid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3815)
CVE-2011-3815
CWE-200
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3818)
CVE-2011-3818
CWE-200
Medium
XOOPS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3822)
CVE-2011-3822
CWE-200
Medium
YOURLS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3824)
CVE-2011-3824
CWE-200
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3979)
CVE-2011-3979
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4064)
CVE-2011-4064
CWE-707
Medium
Roundcube Resource Management Errors Vulnerability (CVE-2011-4078)
CVE-2011-4078
-
Medium
Jboss EAP Improper Authentication Vulnerability (CVE-2011-4085)
CVE-2011-4085
CWE-287
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4090)
CVE-2011-4090
CWE-707
Medium
Squid Resource Management Errors Vulnerability (CVE-2011-4096)
CVE-2011-4096
-
Medium
phpMyAdmin Improper Restriction of XML External Entity Reference Vulnerability (CVE-2011-4107)
CVE-2011-4107
CWE-611
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-4108)
CVE-2011-4108
-
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4133)
CVE-2011-4133
CWE-352
Medium
Django Improper Input Validation Vulnerability (CVE-2011-4136)
CVE-2011-4136
CWE-20
Medium
Django Resource Management Errors Vulnerability (CVE-2011-4137)
CVE-2011-4137
-
Medium
Django Improper Input Validation Vulnerability (CVE-2011-4138)
CVE-2011-4138
CWE-20
Medium
Django Improper Input Validation Vulnerability (CVE-2011-4139)
CVE-2011-4139
CWE-20
Medium
Django Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4140)
CVE-2011-4140
CWE-352
Medium
PHP Improper Input Validation Vulnerability (CVE-2011-4153)
CVE-2011-4153
CWE-20
Medium
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4203)
CVE-2011-4203
CWE-94
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4278)
CVE-2011-4278
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4279)
CVE-2011-4279
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4280)
CVE-2011-4280
CWE-707
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4281)
CVE-2011-4281
CWE-352
Medium
« Previous
1
...
24
25
26
27
28
29
30
31
...
117
Next »