🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Medium Severity
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Medium Severity Vulnerabilities
Found
8734 vulnerabilities
at
Medium
severity.
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2017-3456 Vulnerability (CVE-2017-3456)
CVE-2017-3456
-
Medium
MySQL CVE-2017-3457 Vulnerability (CVE-2017-3457)
CVE-2017-3457
-
Medium
MySQL CVE-2017-3458 Vulnerability (CVE-2017-3458)
CVE-2017-3458
-
Medium
MySQL CVE-2017-3459 Vulnerability (CVE-2017-3459)
CVE-2017-3459
-
Medium
MySQL CVE-2017-3460 Vulnerability (CVE-2017-3460)
CVE-2017-3460
-
Medium
MySQL CVE-2017-3461 Vulnerability (CVE-2017-3461)
CVE-2017-3461
-
Medium
MySQL CVE-2017-3462 Vulnerability (CVE-2017-3462)
CVE-2017-3462
-
Medium
MySQL CVE-2017-3463 Vulnerability (CVE-2017-3463)
CVE-2017-3463
-
Medium
MySQL CVE-2017-3464 Vulnerability (CVE-2017-3464)
CVE-2017-3464
-
Medium
MySQL CVE-2017-3465 Vulnerability (CVE-2017-3465)
CVE-2017-3465
-
Medium
MySQL CVE-2017-3529 Vulnerability (CVE-2017-3529)
CVE-2017-3529
-
Medium
MySQL CVE-2017-3600 Vulnerability (CVE-2017-3600)
CVE-2017-3600
-
Medium
MySQL CVE-2017-3633 Vulnerability (CVE-2017-3633)
CVE-2017-3633
-
Medium
MySQL CVE-2017-3634 Vulnerability (CVE-2017-3634)
CVE-2017-3634
-
Medium
MySQL CVE-2017-3635 Vulnerability (CVE-2017-3635)
CVE-2017-3635
-
Medium
MySQL CVE-2017-3636 Vulnerability (CVE-2017-3636)
CVE-2017-3636
-
Medium
MySQL CVE-2017-3637 Vulnerability (CVE-2017-3637)
CVE-2017-3637
-
Medium
MySQL CVE-2017-3638 Vulnerability (CVE-2017-3638)
CVE-2017-3638
-
Medium
MySQL CVE-2017-3639 Vulnerability (CVE-2017-3639)
CVE-2017-3639
-
Medium
MySQL CVE-2017-3640 Vulnerability (CVE-2017-3640)
CVE-2017-3640
-
Medium
MySQL CVE-2017-3641 Vulnerability (CVE-2017-3641)
CVE-2017-3641
-
Medium
MySQL CVE-2017-3642 Vulnerability (CVE-2017-3642)
CVE-2017-3642
-
Medium
MySQL CVE-2017-3643 Vulnerability (CVE-2017-3643)
CVE-2017-3643
-
Medium
MySQL CVE-2017-3644 Vulnerability (CVE-2017-3644)
CVE-2017-3644
-
Medium
MySQL CVE-2017-3645 Vulnerability (CVE-2017-3645)
CVE-2017-3645
-
Medium
MySQL CVE-2017-3646 Vulnerability (CVE-2017-3646)
CVE-2017-3646
-
Medium
MySQL CVE-2017-3647 Vulnerability (CVE-2017-3647)
CVE-2017-3647
-
Medium
MySQL CVE-2017-3648 Vulnerability (CVE-2017-3648)
CVE-2017-3648
-
Medium
MySQL CVE-2017-3649 Vulnerability (CVE-2017-3649)
CVE-2017-3649
-
Medium
MySQL CVE-2017-3651 Vulnerability (CVE-2017-3651)
CVE-2017-3651
-
Medium
MySQL CVE-2017-3652 Vulnerability (CVE-2017-3652)
CVE-2017-3652
-
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3732)
CVE-2017-3732
CWE-200
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-3735)
CVE-2017-3735
CWE-119
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3736)
CVE-2017-3736
CWE-200
Medium
OpenSSL Out-of-bounds Write Vulnerability (CVE-2017-3737)
CVE-2017-3737
CWE-787
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3738)
CVE-2017-3738
CWE-200
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5197)
CVE-2017-5197
CWE-707
Medium
Serendipity URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-5474)
CVE-2017-5474
CWE-601
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487)
CVE-2017-5487
CWE-200
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5488)
CVE-2017-5488
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5490)
CVE-2017-5490
CWE-707
Medium
WordPress Insecure Default Initialization of Resource Vulnerability (CVE-2017-5491)
CVE-2017-5491
CWE-1188
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5494)
CVE-2017-5494
CWE-707
Medium
Plone CMS Use of Externally-Controlled Format String Vulnerability (CVE-2017-5524)
CVE-2017-5524
CWE-134
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5553)
CVE-2017-5553
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5608)
CVE-2017-5608
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610)
CVE-2017-5610
CWE-200
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5612)
CVE-2017-5612
CWE-707
Medium
ReviveAdserver Session Fixation Vulnerability (CVE-2017-5831)
CVE-2017-5831
CWE-384
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5832)
CVE-2017-5832
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5833)
CVE-2017-5833
CWE-707
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5866)
CVE-2017-5866
CWE-200
Medium
ownCloud Uncontrolled Resource Consumption Vulnerability (CVE-2017-5867)
CVE-2017-5867
CWE-400
Medium
OpenVPN AS Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2017-5868)
CVE-2017-5868
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5875)
CVE-2017-5875
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5876)
CVE-2017-5876
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5877)
CVE-2017-5877
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6003)
CVE-2017-6003
CWE-707
Medium
TYPO3 Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-6370)
CVE-2017-6370
CWE-319
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6446)
CVE-2017-6446
CWE-707
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6483)
CVE-2017-6483
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)
CVE-2017-6514
CWE-200
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6814)
CVE-2017-6814
CWE-707
Medium
WordPress Improper Input Validation Vulnerability (CVE-2017-6815)
CVE-2017-6815
CWE-20
Medium
WordPress Incorrect Authorization Vulnerability (CVE-2017-6816)
CVE-2017-6816
CWE-863
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6817)
CVE-2017-6817
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6818)
CVE-2017-6818
CWE-707
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819)
CVE-2017-6819
CWE-352
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6820)
CVE-2017-6820
CWE-707
Medium
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6905)
CVE-2017-6905
CWE-707
Medium
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6908)
CVE-2017-6908
CWE-707
Medium
Drupal Improper Input Validation Vulnerability (CVE-2017-6921)
CVE-2017-6921
CWE-20
Medium
Drupal Files or Directories Accessible to External Parties Vulnerability (CVE-2017-6922)
CVE-2017-6922
CWE-552
Medium
Drupal Missing Authorization Vulnerability (CVE-2017-6923)
CVE-2017-6923
CWE-862
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6927)
CVE-2017-6927
CWE-707
Medium
« Previous
1
...
56
57
58
59
60
61
62
63
...
117
Next »