Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Medium Severity Vulnerabilities

Found 8230 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
e107 Credentials Management Errors Vulnerability (CVE-2013-7305)
CVE-2013-7305
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2013-7327)
CVE-2013-7327
CWE-20
Medium
PHP Numeric Errors Vulnerability (CVE-2013-7328)
CVE-2013-7328
-
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7330)
CVE-2013-7330
CWE-264
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7341)
CVE-2013-7341
CWE-707
Medium
ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344)
CVE-2013-7344
-
Medium
PHP CVE-2013-7345 Vulnerability (CVE-2013-7345)
CVE-2013-7345
-
Medium
b2evolution Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7352)
CVE-2013-7352
CWE-352
Medium
Python Data Processing Errors Vulnerability (CVE-2013-7440)
CVE-2013-7440
-
Medium
Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-7443)
CVE-2013-7443
CWE-119
Medium
Moodle Credentials Management Errors Vulnerability (CVE-2014-0008)
CVE-2014-0008
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0009)
CVE-2014-0009
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0010)
CVE-2014-0010
CWE-352
Medium
Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0013)
CVE-2014-0013
CWE-707
Medium
Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0014)
CVE-2014-0014
CWE-707
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2014-0033)
CVE-2014-0033
CWE-20
Medium
Jboss EAP Improper Input Validation Vulnerability (CVE-2014-0034)
CVE-2014-0034
CWE-20
Medium
Jboss EAP Cryptographic Issues Vulnerability (CVE-2014-0035)
CVE-2014-0035
-
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0060)
CVE-2014-0060
CWE-264
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0061)
CVE-2014-0061
CWE-264
Medium
PostgreSQL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0062)
CVE-2014-0062
CWE-362
Medium
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0063)
CVE-2014-0063
CWE-119
Medium
PostgreSQL Numeric Errors Vulnerability (CVE-2014-0064)
CVE-2014-0064
-
Medium
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0065)
CVE-2014-0065
CWE-119
Medium
PostgreSQL Improper Input Validation Vulnerability (CVE-2014-0066)
CVE-2014-0066
CWE-20
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0067)
CVE-2014-0067
CWE-264
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0075)
CVE-2014-0075
-
Medium
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-0080)
CVE-2014-0080
CWE-138
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0081)
CVE-2014-0081
CWE-707
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2014-0082)
CVE-2014-0082
CWE-20
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0093)
CVE-2014-0093
CWE-264
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2014-0095)
CVE-2014-0095
CWE-20
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0096)
CVE-2014-0096
CWE-264
Medium
Oracle HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
Apache HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0099)
CVE-2014-0099
-
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2014-0117)
CVE-2014-0117
CWE-20
Medium
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)
CVE-2014-0118
CWE-400
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)
CVE-2014-0118
CWE-400
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0119)
CVE-2014-0119
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0122)
CVE-2014-0122
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0123)
CVE-2014-0123
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0124)
CVE-2014-0124
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0125)
CVE-2014-0125
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0126)
CVE-2014-0126
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0127)
CVE-2014-0127
CWE-264
Medium
Squid Improper Input Validation Vulnerability (CVE-2014-0128)
CVE-2014-0128
CWE-20
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0129)
CVE-2014-0129
CWE-264
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-0130)
CVE-2014-0130
CWE-22
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0165)
CVE-2014-0165
CWE-264
Medium
WordPress Improper Authentication Vulnerability (CVE-2014-0166)
CVE-2014-0166
CWE-287
Medium
Jolokia Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0168)
CVE-2014-0168
CWE-352
Medium
Jboss EAP Incorrect Authorization Vulnerability (CVE-2014-0169)
CVE-2014-0169
CWE-863
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0195)
CVE-2014-0195
CWE-119
Medium
OpenSSL Other Vulnerability (CVE-2014-0198)
CVE-2014-0198
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0207)
CVE-2014-0207
CWE-119
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0213)
CVE-2014-0213
CWE-352
Medium
Moodle Improper Authentication Vulnerability (CVE-2014-0214)
CVE-2014-0214
CWE-287
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0215)
CVE-2014-0215
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0216)
CVE-2014-0216
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0217)
CVE-2014-0217
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0218)
CVE-2014-0218
CWE-707
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2014-0221)
CVE-2014-0221
-
Medium
Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Oracle HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Apache Tomcat Data Processing Errors Vulnerability (CVE-2014-0227)
CVE-2014-0227
-
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-0231)
CVE-2014-0231
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-0237)
CVE-2014-0237
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0238)
CVE-2014-0238
CWE-119
Medium
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0248)
CVE-2014-0248
CWE-94
Medium
Oracle Database Server CVE-2014-0377 Vulnerability (CVE-2014-0377)
CVE-2014-0377
-
Medium
Oracle Database Server CVE-2014-0378 Vulnerability (CVE-2014-0378)
CVE-2014-0378
-
Medium
MySQL CVE-2014-0384 Vulnerability (CVE-2014-0384)
CVE-2014-0384
-
Medium
MySQL CVE-2014-0386 Vulnerability (CVE-2014-0386)
CVE-2014-0386
-
Medium