Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15488 vulnerabilities in this category.

Critical: 1675 High: 4167 Medium: 8824 Low: 816 Information: 6
Vulnerability Name
CVE
CWE
Severity
MediaWiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-29904)
CVE-2022-29904
CWE-138
Critical
Elgg Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2936)
CVE-2011-2936
CWE-138
Critical
Oracle Database Server CVE-2006-5344 Vulnerability (CVE-2006-5344)
CVE-2006-5344
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-5343)
CVE-2006-5343
-
Critical
Oracle Database Server Deserialization of Untrusted Data Vulnerability (CVE-2018-14719)
CVE-2018-14719
CWE-502
Critical
Oracle Database Server CVE-2006-5341 Vulnerability (CVE-2006-5341)
CVE-2006-5341
-
Critical
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-14720)
CVE-2018-14720
CWE-502
Critical
Oracle Database Server CVE-2006-5339 Vulnerability (CVE-2006-5339)
CVE-2006-5339
-
Critical
Oracle Database Server CVE-2006-5338 Vulnerability (CVE-2006-5338)
CVE-2006-5338
-
Critical
Oracle Database Server CVE-2006-5337 Vulnerability (CVE-2006-5337)
CVE-2006-5337
-
Critical
Oracle Database Server CVE-2006-5336 Vulnerability (CVE-2006-5336)
CVE-2006-5336
-
Critical
Oracle Database Server CVE-2006-5335 Vulnerability (CVE-2006-5335)
CVE-2006-5335
-
Critical
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-14721)
CVE-2018-14721
CWE-918
Critical
Oracle Database Server CVE-2006-5332 Vulnerability (CVE-2006-5332)
CVE-2006-5332
-
Critical
XWikiplatform Improper Encoding or Escaping of Output Vulnerability (CVE-2024-55663)
CVE-2024-55663
CWE-116
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5347)
CVE-2006-5347
-
Critical
WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122)
CVE-2011-3122
-
Critical
WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125)
CVE-2011-3125
-
Critical
Grafana Improper Authentication Vulnerability (CVE-2018-15727)
CVE-2018-15727
CWE-287
Critical
phpMyFAQ Weak Password Requirements Vulnerability (CVE-2022-3754)
CVE-2022-3754
CWE-521
Critical
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2024-55638)
CVE-2024-55638
CWE-502
Critical
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2024-55637)
CVE-2024-55637
CWE-502
Critical
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-15882)
CVE-2018-15882
CWE-434
Critical
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3129)
CVE-2011-3129
CWE-264
Critical
OpenSSL Improper Validation of Integrity Check Value Vulnerability (CVE-2026-34182)
CVE-2026-34182
CWE-354
Critical
Pega Infinity Improper Authentication Vulnerability (CVE-2021-27651)
CVE-2021-27651
CWE-287
Critical
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2024-55636)
CVE-2024-55636
CWE-502
Critical
Moodle Improper Input Validation Vulnerability (CVE-2006-4936)
CVE-2006-4936
CWE-20
Critical
Moodle Improper Input Validation Vulnerability (CVE-2006-4935)
CVE-2006-4935
CWE-20
Critical
Oracle Database Server CVE-2006-5345 Vulnerability (CVE-2006-5345)
CVE-2006-5345
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5348)
CVE-2006-5348
-
Critical
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4812)
CVE-2006-4812
CWE-94
Critical
GlassFish Use of Hard-coded Credentials Vulnerability (CVE-2018-14324)
CVE-2018-14324
CWE-798
Critical
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-56145)
CVE-2024-56145
CWE-94
Critical
ATutor Improper Authentication Vulnerability (CVE-2014-9753)
CVE-2014-9753
CWE-287
Critical
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2715)
CVE-2011-2715
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13447)
CVE-2018-13447
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13448)
CVE-2018-13448
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13449)
CVE-2018-13449
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13450)
CVE-2018-13450
CWE-138
Critical
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33937)
CVE-2026-33937
CWE-94
Critical
PrestaShop CVE-2018-13784 Vulnerability (CVE-2018-13784)
CVE-2018-13784
-
Critical
FluxBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9574)
CVE-2014-9574
CWE-22
Critical
Telerik Web UI Missing Authorization Vulnerability (CVE-2021-28141)
CVE-2021-28141
CWE-862
Critical
MediaWiki Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-9487)
CVE-2014-9487
CWE-611
Critical
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-34018)
CVE-2026-34018
CWE-138
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5366)
CVE-2006-5366
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5349)
CVE-2006-5349
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5365)
CVE-2006-5365
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5362)
CVE-2006-5362
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5361)
CVE-2006-5361
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5360)
CVE-2006-5360
-
Critical
Oracle Application Server CVE-2006-5359 Vulnerability (CVE-2006-5359)
CVE-2006-5359
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5358)
CVE-2006-5358
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5357)
CVE-2006-5357
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5356)
CVE-2006-5356
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5355)
CVE-2006-5355
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5354)
CVE-2006-5354
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5354)
CVE-2006-5354
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-5353)
CVE-2006-5353
-
Critical
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-27903)
CVE-2021-27903
CWE-94
Critical
Ruby CVE-2018-16395 Vulnerability (CVE-2018-16395)
CVE-2018-16395
-
Critical
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-53908)
CVE-2024-53908
CWE-138
Critical
Chamilo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2026-33707)
CVE-2026-33707
CWE-640
Critical
Oracle Database Server Other Vulnerability (CVE-2006-3700)
CVE-2006-3700
-
Critical
Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1999019)
CVE-2018-1999019
CWE-94
Critical
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2006-3738)
CVE-2006-3738
CWE-119
Critical
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51490)
CVE-2024-51490
CWE-707
Critical
HSQLDB CVE-2022-41853 Vulnerability (CVE-2022-41853)
CVE-2022-41853
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-3710)
CVE-2006-3710
-
Critical
PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-19126)
CVE-2018-19126
CWE-434
Critical
Oracle Application Server Other Vulnerability (CVE-2006-3708)
CVE-2006-3708
-
Critical
Oracle Database Server CVE-2006-3705 Vulnerability (CVE-2006-3705)
CVE-2006-3705
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-3704)
CVE-2006-3704
-
Critical
Oracle Database Server CVE-2006-3703 Vulnerability (CVE-2006-3703)
CVE-2006-3703
-
Critical