Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 8857 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)
CVE-2014-8774
CWE-707
Medium
MODX Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-8775)
CVE-2014-8775
CWE-200
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8793)
CVE-2014-8793
CWE-707
Medium
ReviveAdserver Other Vulnerability (CVE-2014-8875)
CVE-2014-8875
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)
CVE-2014-8958
CWE-707
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8959)
CVE-2014-8959
CWE-22
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8961)
CVE-2014-8961
CWE-22
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8992)
CVE-2014-8992
CWE-707
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)
CVE-2014-9015
CWE-264
Medium
Drupal CVE-2014-9016 Vulnerability (CVE-2014-9016)
CVE-2014-9016
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9031)
CVE-2014-9031
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9032)
CVE-2014-9032
CWE-707
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033)
CVE-2014-9033
CWE-352
Medium
WordPress Data Processing Errors Vulnerability (CVE-2014-9034)
CVE-2014-9034
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9035)
CVE-2014-9035
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9036)
CVE-2014-9036
CWE-707
Medium
WordPress Cryptographic Issues Vulnerability (CVE-2014-9037)
CVE-2014-9037
-
Medium
WordPress Improper Input Validation Vulnerability (CVE-2014-9038)
CVE-2014-9038
CWE-20
Medium
WordPress 7PK - Security Features Vulnerability (CVE-2014-9039)
CVE-2014-9039
-
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9041)
CVE-2014-9041
CWE-352
Medium
ownCloud Improper Authentication Vulnerability (CVE-2014-9043)
CVE-2014-9043
CWE-287
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9044)
CVE-2014-9044
CWE-200
Medium
ownCloud Improper Authentication Vulnerability (CVE-2014-9045)
CVE-2014-9045
CWE-287
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9046)
CVE-2014-9046
CWE-200
Medium
ownCloud CVE-2014-9047 Vulnerability (CVE-2014-9047)
CVE-2014-9047
-
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9048)
CVE-2014-9048
CWE-264
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9049)
CVE-2014-9049
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9059)
CVE-2014-9059
CWE-707
Medium
Moodle Improper Input Validation Vulnerability (CVE-2014-9060)
CVE-2014-9060
CWE-20
Medium
OpenVPN AS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9104)
CVE-2014-9104
CWE-352
Medium
phpMyAdmin Resource Management Errors Vulnerability (CVE-2014-9218)
CVE-2014-9218
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9219)
CVE-2014-9219
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9241)
CVE-2014-9241
CWE-707
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9276)
CVE-2014-9276
CWE-352
Medium
Python Other Vulnerability (CVE-2014-9365)
CVE-2014-9365
-
Medium
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9407)
CVE-2014-9407
CWE-352
Medium
lightbox2 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9441)
CVE-2014-9441
CWE-352
Medium
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9476)
CVE-2014-9476
CWE-264
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9477)
CVE-2014-9477
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9479)
CVE-2014-9479
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9480)
CVE-2014-9480
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9481)
CVE-2014-9481
CWE-200
Medium
TYPO3 Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-9508)
CVE-2014-9508
CWE-59
Medium
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9526)
CVE-2014-9526
CWE-707
Medium
Roundcube Multiple Cross-site Request Forgery (CSRF) Vulnerabilities (CVE-2014-9587)
CVE-2014-9587
-
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9599)
CVE-2014-9599
CWE-707
Medium
Jenkins 7PK - Security Features Vulnerability (CVE-2014-9634)
CVE-2014-9634
-
Medium
Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9634)
CVE-2014-9634
-
Medium
Jenkins 7PK - Security Features Vulnerability (CVE-2014-9635)
CVE-2014-9635
-
Medium
Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9635)
CVE-2014-9635
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9652)
CVE-2014-9652
CWE-119
Medium
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685)
CVE-2014-9685
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9709)
CVE-2014-9709
CWE-119
Medium
Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)
CVE-2014-9720
-
Medium
Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)
CVE-2014-9749
CWE-264
Medium
ATutor Other Vulnerability (CVE-2014-9752)
CVE-2014-9752
-
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9758)
CVE-2014-9758
CWE-707
Medium
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9767)
CVE-2014-9767
CWE-22
Medium
IBM RTC Other Vulnerability (CVE-2015-0112)
CVE-2015-0112
-
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)
CVE-2015-0113
CWE-200
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0204)
CVE-2015-0204
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0205)
CVE-2015-0205
-
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0206)
CVE-2015-0206
CWE-119
Medium
OpenSSL Other Vulnerability (CVE-2015-0207)
CVE-2015-0207
-
Medium
OpenSSL Other Vulnerability (CVE-2015-0208)
CVE-2015-0208
-
Medium
OpenSSL Other Vulnerability (CVE-2015-0209)
CVE-2015-0209
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)
CVE-2015-0211
CWE-200
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0213)
CVE-2015-0213
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-0214)
CVE-2015-0214
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0215)
CVE-2015-0215
CWE-200
Medium
Moodle Resource Management Errors Vulnerability (CVE-2015-0217)
CVE-2015-0217
-
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0218)
CVE-2015-0218
CWE-352
Medium
Django DEPRECATED: Code Vulnerability (CVE-2015-0219)
CVE-2015-0219
-
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0220)
CVE-2015-0220
CWE-707
Medium
Django Resource Management Errors Vulnerability (CVE-2015-0221)
CVE-2015-0221
-
Medium