Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Information Disclosure

This page lists 612 vulnerabilities in this category.

Critical: 5 High: 392 Medium: 135 Low: 70 Information: 10
Vulnerability Name
CVE
CWE
Severity
OwnCloud phpinfo Information Disclosure (CVE-2023-49103)
CVE-2023-49103
CWE-200
Critical
Citrix NetScaler Memory Disclosure 'Citrix Bleed' (CVE-2023-4966)
CVE-2023-4966
CWE-119
Critical
Citrix NetScaler Memory Disclosure 'Citrix Bleed 2' (CVE-2025-5777)
CVE-2025-5349
CWE-457
Critical
Citrix NetScaler Memory Overread (CVE-2026-3055)
CVE-2026-3055
CWE-125
Critical
Nginx UI Information Disclosure (CVE-2026-27944)
CVE-2026-27944
CWE-311
Critical
Trace.axd Detected
-
CWE-215
High
[Possible] Backup Source Code Detected
-
CWE-538
High
Macromedia Dreamweaver remote database scripts
CVE-2004-1893
CWE-200
High
Configuration file disclosure
-
CWE-538
High
web.xml configuration file disclosure
-
CWE-538
High
Configuration file source code disclosure
-
CWE-538
High
Apache Axis2 administration console weak password
-
CWE-200
High
Devise weak password
-
CWE-200
High
GlassFish admin console weak credentials
-
CWE-1391
High
IBM WebSphere administration console weak password
-
CWE-200
High
Jenkins weak password
-
CWE-200
High
Microsoft IIS5 NTLM and Basic authentication bypass
CVE-2007-2815
CWE-288
High
SAP weak/predictable user credentials
-
CWE-200
High
Weak password
-
CWE-200
High
WebLogic admin console weak credentials
-
CWE-1391
High
Webmail weak password
-
CWE-200
High
Web application default/weak credentials
-
CWE-200
High
Apache Axis2 xsd local file inclusion
-
CWE-22
High
Adobe ColdFusion directory traversal
CVE-2013-3336
CWE-22
High
Core dump file
-
CWE-200
High
Possible database backup
-
CWE-538
High
Arbitrary local file read via file upload
-
CWE-200
High
The Heartbleed Bug
CVE-2014-0160
CWE-200
High
IBM Web Content Manager XPath injection
CVE-2013-6735
CWE-643
High
Multiple vulnerabilities in Ioncube loader-wizard.php
-
CWE-552
High
JBoss Seam remoting vulnerabilities
CVE-2013-6448
CWE-611
High
JetLeak vulnerability
CVE-2015-2080
CWE-200
High
Magento Cacheleak
-
CWE-200
High
MantisBT multiple security issues
CVE-2015-1042
CWE-200
High
Minify arbitrary file disclosure
CVE-2013-6619
CWE-538
High
MySQL connection credentials
-
CWE-538
High
Oracle JavaServer Faces multiple vulnerabilities
CVE-2013-3827
CWE-22
High
PHP-CGI remote code execution
CVE-2012-2311
CWE-20
High
RoR Database Configuration File Detected
-
CWE-538
High
[Possible] Sublime SFTP Config File Detected
-
CWE-200
High
Reachable SharePoint interface
-
CWE-200
High
SharePoint user enumeration
-
CWE-200
High
IBM WebSphere/WebLogic application source file exposure
-
CWE-200
High
WordPress debug mode
-
CWE-200
High
X-Forwarded-For HTTP header security bypass
-
CWE-287
High
Zend framework configuration file information disclosure
-
CWE-538
High
Zend Framework local file disclosure via XXE injection
CVE-2015-5161
CWE-611
High
Drupal 7 arbitrary PHP code execution and information disclosure
CVE-2012-4554
CWE-434
High
Ektron CMS unauthenticated code execution and Local File Read
CVE-2012-5358
CWE-20
High
Elasticsearch service accessible
-
CWE-200
High
MediaWiki multiple remote vulnerabilities
CVE-2012-4378
CWE-79
High
Nginx memory disclosure with specially crafted HTTP backend responses
CVE-2012-1180
CWE-416
High
vBulletin customer number disclosure
CVE-2013-6129
CWE-200
High
webadmin.php script
-
CWE-552
High
WordPress W3 Total Cache plugin predictable cache filenames
CVE-2012-6079
CWE-200
High
Bazaar repository found
-
CWE-538
High
GIT Detected exposed
-
CWE-527
High
JBoss BSHDeployer MBean
-
CWE-200
High
JBoss HttpAdaptor JMXInvokerServlet
-
CWE-94
High
JBoss JMX management console
-
CWE-200
High
JBoss ServerInfo MBean
CVE-2010-0738
CWE-200
High
JBoss Server MBean
-
CWE-200
High
JBoss JMX Console Unrestricted Access
-
CWE-200
High
JBoss Web Console JMX Invoker
-
CWE-200
High
Mercurial repository found
-
CWE-538
High
RSA Private Key Detected
-
CWE-200
High
SVN Detected
-
CWE-538
High
Unprotected phpMyAdmin interface
-
CWE-205
High
Apache solr service exposed
-
CWE-200
High
Padding oracle attack
-
CWE-209
High
XML entity injection
-
CWE-611
High
XML external entity injection and XML injection
-
CWE-611
High
XML external entity injection
-
CWE-611
High
XML External Entity Injection via external file
-
CWE-611
High
XML external entity injection via File Upload
-
CWE-611
High