Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5489)
CVE-2012-5489
CWE-264
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5490)
CVE-2012-5490
CWE-707
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5491)
CVE-2012-5491
CWE-200
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5492)
CVE-2012-5492
CWE-200
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5494)
CVE-2012-5494
CWE-707
Medium
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5495)
CVE-2012-5495
CWE-94
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5496)
CVE-2012-5496
-
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5497)
CVE-2012-5497
CWE-200
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5498)
CVE-2012-5498
CWE-264
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5499)
CVE-2012-5499
-
Medium
Plone CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5500)
CVE-2012-5500
CWE-352
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5501)
CVE-2012-5501
CWE-264
Medium
Plone CMS CVE-2012-5503 Vulnerability (CVE-2012-5503)
CVE-2012-5503
-
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5504)
CVE-2012-5504
CWE-707
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5505)
CVE-2012-5505
CWE-200
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5506)
CVE-2012-5506
-
Medium
Plone CMS Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)
CVE-2012-5507
CWE-362
Medium
Zope Web Application Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)
CVE-2012-5507
CWE-362
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5508)
CVE-2012-5508
CWE-200
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2012-5533)
CVE-2012-5533
-
Medium
Apache Tomcat CVE-2012-5568 Vulnerability (CVE-2012-5568)
CVE-2012-5568
-
Medium
Jboss EAP Cryptographic Issues Vulnerability (CVE-2012-5575)
CVE-2012-5575
-
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5606)
CVE-2012-5606
CWE-707
Medium
ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607)
CVE-2012-5607
-
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5608)
CVE-2012-5608
CWE-707
Medium
ownCloud Other Vulnerability (CVE-2012-5609)
CVE-2012-5609
-
Medium
ownCloud Improper Input Validation Vulnerability (CVE-2012-5610)
CVE-2012-5610
CWE-20
Medium
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5611)
CVE-2012-5611
CWE-119
Medium
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5612)
CVE-2012-5612
CWE-119
Medium
MySQL Configuration Vulnerability (CVE-2012-5613)
CVE-2012-5613
-
Medium
MySQL Improper Input Validation Vulnerability (CVE-2012-5614)
CVE-2012-5614
CWE-20
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5615)
CVE-2012-5615
CWE-200
Medium
MySQL Insufficiently Protected Credentials Vulnerability (CVE-2012-5627)
CVE-2012-5627
CWE-522
Medium
Squid Improper Input Validation Vulnerability (CVE-2012-5643)
CVE-2012-5643
CWE-20
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5651)
CVE-2012-5651
CWE-264
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5652)
CVE-2012-5652
CWE-200
Medium
Drupal Improper Input Validation Vulnerability (CVE-2012-5653)
CVE-2012-5653
CWE-20
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5665)
CVE-2012-5665
CWE-264
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5666)
CVE-2012-5666
CWE-707
Medium
Joomla CVE-2012-5827 Vulnerability (CVE-2012-5827)
CVE-2012-5827
-
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5881)
CVE-2012-5881
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5882)
CVE-2012-5882
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5883)
CVE-2012-5883
CWE-707
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5885)
CVE-2012-5885
CWE-264
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2012-5886)
CVE-2012-5886
CWE-287
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2012-5887)
CVE-2012-5887
CWE-287
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5908)
CVE-2012-5908
CWE-707
Medium
b2evolution Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5910)
CVE-2012-5910
CWE-138
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5911)
CVE-2012-5911
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6043)
CVE-2012-6043
CWE-707
Medium
Jenkins Improper Input Validation Vulnerability (CVE-2012-6072)
CVE-2012-6072
CWE-20
Medium
Jenkins Improper Input Validation Vulnerability (CVE-2012-6073)
CVE-2012-6073
CWE-20
Medium
Moodle Improper Input Validation Vulnerability (CVE-2012-6087)
CVE-2012-6087
CWE-20
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6098)
CVE-2012-6098
CWE-264
Medium
Moodle Improper Input Validation Vulnerability (CVE-2012-6099)
CVE-2012-6099
CWE-20
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6100)
CVE-2012-6100
CWE-264
Medium
Moodle Improper Input Validation Vulnerability (CVE-2012-6101)
CVE-2012-6101
CWE-20
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6102)
CVE-2012-6102
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6103)
CVE-2012-6103
CWE-352
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6104)
CVE-2012-6104
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6105)
CVE-2012-6105
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6106)
CVE-2012-6106
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6112)
CVE-2012-6112
CWE-264
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6113)
CVE-2012-6113
CWE-200
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6121)
CVE-2012-6121
CWE-707
Medium
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6144)
CVE-2012-6144
CWE-138
Medium
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6146)
CVE-2012-6146
CWE-264
Medium
Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342)
CVE-2012-6342
CWE-352
Medium
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6433)
CVE-2012-6433
CWE-352
Medium
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6434)
CVE-2012-6434
CWE-352
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6458)
CVE-2012-6458
CWE-707
Medium
Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6497)
CVE-2012-6497
CWE-200
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6528)
CVE-2012-6528
CWE-707
Medium
Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6561)
CVE-2012-6561
CWE-707
Medium
Elgg Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6562)
CVE-2012-6562
CWE-264
Medium