Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
WP Plugin Contact Form 7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2242)
CVE-2024-2242
CWE-707
Medium
Apache HTTP Server Other Vulnerability (CVE-2002-0654)
CVE-2002-0654
-
Medium
Moodle Inappropriate Encoding for Output Context Vulnerability (CVE-2024-34006)
CVE-2024-34006
CWE-838
Medium
Moodle CVE-2024-34005 Vulnerability (CVE-2024-34005)
CVE-2024-34005
-
Medium
Moodle CVE-2024-34004 Vulnerability (CVE-2024-34004)
CVE-2024-34004
-
Medium
Moodle CVE-2024-34003 Vulnerability (CVE-2024-34003)
CVE-2024-34003
-
Medium
Moodle CVE-2024-34002 Vulnerability (CVE-2024-34002)
CVE-2024-34002
-
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0562)
CVE-2002-0562
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34000)
CVE-2024-34000
CWE-707
Medium
Oracle Application Server Improper Authentication Vulnerability (CVE-2002-0563)
CVE-2002-0563
CWE-287
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33998)
CVE-2024-33998
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33997)
CVE-2024-33997
CWE-707
Medium
Moodle CVE-2024-33996 Vulnerability (CVE-2024-33996)
CVE-2024-33996
-
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0565)
CVE-2002-0565
-
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0566)
CVE-2002-0566
-
Medium
Microsoft SQL Server Other Vulnerability (CVE-2002-0643)
CVE-2002-0643
-
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-32464)
CVE-2024-32464
CWE-707
Medium
PHP Other Vulnerability (CVE-2002-0484)
CVE-2002-0484
-
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0659)
CVE-2002-0659
-
Medium
XWikiplatform Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-31985)
CVE-2024-31985
CWE-352
Medium
Oracle HTTP Server Other Vulnerability (CVE-2002-0659)
CVE-2002-0659
-
Medium
OpenSSL Other Vulnerability (CVE-2002-0659)
CVE-2002-0659
-
Medium
Zope Web Application Server Other Vulnerability (CVE-2002-0687)
CVE-2002-0687
-
Medium
XWikiplatform Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-31464)
CVE-2024-31464
CWE-916
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-30618)
CVE-2024-30618
CWE-707
Medium
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-30617)
CVE-2024-30617
CWE-352
Medium
Oracle Database Server Other Vulnerability (CVE-2002-0840)
CVE-2002-0840
-
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0840)
CVE-2002-0840
-
Medium
Apache HTTP Server Other Vulnerability (CVE-2002-0840)
CVE-2002-0840
-
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2765)
CVE-2024-2765
CWE-707
Medium
PHP Observable Discrepancy Vulnerability (CVE-2024-2408)
CVE-2024-2408
CWE-203
Medium
Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2247)
CVE-2024-2247
CWE-707
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0560)
CVE-2002-0560
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34355)
CVE-2024-34355
CWE-707
Medium
Apache Traffic Server CVE-2024-38311 Vulnerability (CVE-2024-38311)
CVE-2024-38311
-
Medium
GeoServer CVE-2024-35230 Vulnerability (CVE-2024-35230)
CVE-2024-35230
-
Medium
Moodle Use of a Key Past its Expiration Date Vulnerability (CVE-2024-38277)
CVE-2024-38277
CWE-324
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-38274)
CVE-2024-38274
CWE-707
Medium
Moodle CVE-2024-38273 Vulnerability (CVE-2024-38273)
CVE-2024-38273
-
Medium
Internet Information Services Other Vulnerability (CVE-2002-0072)
CVE-2002-0072
-
Medium
Internet Information Services Other Vulnerability (CVE-2002-0073)
CVE-2002-0073
-
Medium
XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37900)
CVE-2024-37900
CWE-94
Medium
XWikiplatform Missing Authorization Vulnerability (CVE-2024-37898)
CVE-2024-37898
CWE-862
Medium
Squid Out-of-bounds Write Vulnerability (CVE-2024-37894)
CVE-2024-37894
CWE-787
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37674)
CVE-2024-37674
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37384)
CVE-2024-37384
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37383)
CVE-2024-37383
CWE-707
Medium
PrestaShop NULL Pointer Dereference Vulnerability (CVE-2024-36626)
CVE-2024-36626
CWE-476
Medium
Microsoft SQL Server Other Vulnerability (CVE-2002-0224)
CVE-2002-0224
-
Medium
Internet Information Services Other Vulnerability (CVE-2002-0224)
CVE-2002-0224
-
Medium
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2024-35139)
CVE-2024-35139
CWE-276
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34356)
CVE-2024-34356
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34500)
CVE-2024-34500
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34357)
CVE-2024-34357
CWE-707
Medium
TYPO3 Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-34358)
CVE-2024-34358
CWE-770
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2024-34362)
CVE-2024-34362
CWE-416
Medium
Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0419)
CVE-2002-0419
CWE-200
Medium
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364)
CVE-2024-34364
CWE-787
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34468)
CVE-2024-34468
CWE-707
Medium
Oracle Application Server Other Vulnerability (CVE-2002-0386)
CVE-2002-0386
-
Medium
IBM WebSEAL Weak Password Requirements Vulnerability (CVE-2024-35137)
CVE-2024-35137
CWE-521
Medium
TYPO3 CVE-2024-34537 Vulnerability (CVE-2024-34537)
CVE-2024-34537
-
Medium
GeoServer CVE-2024-34696 Vulnerability (CVE-2024-34696)
CVE-2024-34696
-
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34716)
CVE-2024-34716
CWE-707
Medium
PrestaShop CVE-2024-34717 Vulnerability (CVE-2024-34717)
CVE-2024-34717
-
Medium
GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34831)
CVE-2024-34831
CWE-707
Medium
PHP Other Vulnerability (CVE-2002-0253)
CVE-2002-0253
-
Medium
WSO2 Management Console XSS (CVE-2022-29548)
CVE-2022-29548
CWE-79
Medium
Moodle Improper Authentication Vulnerability (CVE-2025-3627)
CVE-2025-3627
CWE-287
Medium
Seo Panel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-22643)
CVE-2024-22643
CWE-352
Medium
Moodle Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-62397)
CVE-2025-62397
CWE-209
Medium
Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-65961)
CVE-2025-65961
CWE-707
Medium
Contao Insufficient Type Distinction Vulnerability (CVE-2025-65960)
CVE-2025-65960
CWE-351
Medium
Apache HTTP Server Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2025-65082)
CVE-2025-65082
CWE-150
Medium
Envoy Proxy Protection Mechanism Failure Vulnerability (CVE-2025-64763)
CVE-2025-64763
CWE-693
Medium