Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 8734 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
ReviveAdserver URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-5433)
CVE-2019-5433
CWE-601
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6261)
CVE-2019-6261
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6262)
CVE-2019-6262
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6263)
CVE-2019-6263
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6264)
CVE-2019-6264
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6341)
CVE-2019-6341
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6588)
CVE-2019-6588
CWE-707
Medium
phpMyAdmin CVE-2019-6799 Vulnerability (CVE-2019-6799)
CVE-2019-6799
-
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7172)
CVE-2019-7172
CWE-707
Medium
MySQL Use After Free Vulnerability (CVE-2019-7317)
CVE-2019-7317
CWE-416
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7400)
CVE-2019-7400
CWE-707
Medium
Rukovoditel Cross-site Scripting (XSS) Vulnerability (CVE-2019-7541)
CVE-2019-7541
-
Medium
Joomla CVE-2019-7739 Vulnerability (CVE-2019-7739)
CVE-2019-7739
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7740)
CVE-2019-7740
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7741)
CVE-2019-7741
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7742)
CVE-2019-7742
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7744)
CVE-2019-7744
CWE-707
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)
CVE-2019-7851
CWE-352
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7852)
CVE-2019-7852
CWE-200
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7853)
CVE-2019-7853
CWE-707
Medium
Magento Cryptographic Issues Vulnerability (CVE-2019-7855)
CVE-2019-7855
-
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7857)
CVE-2019-7857
CWE-352
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7862)
CVE-2019-7862
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7863)
CVE-2019-7863
CWE-707
Medium
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7864)
CVE-2019-7864
CWE-639
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7866)
CVE-2019-7866
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7867)
CVE-2019-7867
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7868)
CVE-2019-7868
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7869)
CVE-2019-7869
CWE-707
Medium
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)
CVE-2019-7872
CWE-639
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7873)
CVE-2019-7873
CWE-352
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7874)
CVE-2019-7874
CWE-352
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7875)
CVE-2019-7875
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7877)
CVE-2019-7877
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7880)
CVE-2019-7880
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7881)
CVE-2019-7881
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7882)
CVE-2019-7882
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7887)
CVE-2019-7887
CWE-707
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7888)
CVE-2019-7888
CWE-200
Medium
Magento Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-7889)
CVE-2019-7889
CWE-138
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7897)
CVE-2019-7897
CWE-707
Medium
Magento Improper Input Validation Vulnerability (CVE-2019-7898)
CVE-2019-7898
CWE-20
Medium
Magento Improper Input Validation Vulnerability (CVE-2019-7899)
CVE-2019-7899
CWE-20
Medium
Magento CVE-2019-7904 Vulnerability (CVE-2019-7904)
CVE-2019-7904
-
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7908)
CVE-2019-7908
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7909)
CVE-2019-7909
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7921)
CVE-2019-7921
CWE-707
Medium
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7925)
CVE-2019-7925
CWE-639
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7926)
CVE-2019-7926
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7927)
CVE-2019-7927
CWE-707
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7929)
CVE-2019-7929
CWE-200
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7934)
CVE-2019-7934
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7935)
CVE-2019-7935
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7936)
CVE-2019-7936
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7937)
CVE-2019-7937
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7938)
CVE-2019-7938
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7939)
CVE-2019-7939
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7940)
CVE-2019-7940
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7944)
CVE-2019-7944
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7945)
CVE-2019-7945
CWE-707
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7947)
CVE-2019-7947
CWE-352
Medium
Magento CVE-2019-8090 Vulnerability (CVE-2019-8090)
CVE-2019-8090
-
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8092)
CVE-2019-8092
CWE-707
Medium
Magento CVE-2019-8107 Vulnerability (CVE-2019-8107)
CVE-2019-8107
-
Medium
Magento Improper Authentication Vulnerability (CVE-2019-8108)
CVE-2019-8108
CWE-287
Medium
Magento Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2019-8113)
CVE-2019-8113
CWE-338
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8115)
CVE-2019-8115
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8117)
CVE-2019-8117
CWE-707
Medium
Magento Cleartext Storage of Sensitive Information Vulnerability (CVE-2019-8118)
CVE-2019-8118
CWE-312
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8120)
CVE-2019-8120
CWE-707
Medium
Magento CVE-2019-8123 Vulnerability (CVE-2019-8123)
CVE-2019-8123
-
Medium
Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)
CVE-2019-8126
CWE-776
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8128)
CVE-2019-8128
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8129)
CVE-2019-8129
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8131)
CVE-2019-8131
CWE-707
Medium