Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
Python Resource Management Errors Vulnerability (CVE-2011-1521)
CVE-2011-1521
-
Medium
Liferay Portal CVE-2011-1571 Vulnerability (CVE-2011-1571)
CVE-2011-1571
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1578)
CVE-2011-1578
CWE-707
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2011-1579)
CVE-2011-1579
CWE-20
Medium
Oracle Database Server CVE-2011-0811 Vulnerability (CVE-2011-0811)
CVE-2011-0811
-
Medium
Oracle Database Server CVE-2011-0805 Vulnerability (CVE-2011-0805)
CVE-2011-0805
-
Medium
PHP Numeric Errors Vulnerability (CVE-2010-4699)
CVE-2010-4699
-
Medium
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-5103)
CVE-2010-5103
CWE-138
Medium
silverstripeCMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-5091)
CVE-2010-5091
CWE-94
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5093)
CVE-2010-5093
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5094)
CVE-2010-5094
CWE-264
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5095)
CVE-2010-5095
CWE-707
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099)
CVE-2010-5099
CWE-20
Medium
TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5101)
CVE-2010-5101
CWE-22
Medium
TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5102)
CVE-2010-5102
CWE-22
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5104)
CVE-2010-5104
CWE-200
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5089)
CVE-2010-5089
CWE-264
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5106)
CVE-2010-5106
CWE-264
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5187)
CVE-2010-5187
CWE-200
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5188)
CVE-2010-5188
CWE-200
Medium
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)
CVE-2010-5278
CWE-22
Medium
Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5284)
CVE-2010-5284
CWE-707
Medium
Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285)
CVE-2010-5285
CWE-352
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)
CVE-2010-5293
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5090)
CVE-2010-5090
CWE-264
Medium
silverstripeCMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5088)
CVE-2010-5088
CWE-352
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5295)
CVE-2010-5295
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4821)
CVE-2010-4821
CWE-707
Medium
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4700)
CVE-2010-4700
CWE-138
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4710)
CVE-2010-4710
CWE-707
Medium
Zikula Cryptographic Issues Vulnerability (CVE-2010-4728)
CVE-2010-4728
-
Medium
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4729)
CVE-2010-4729
CWE-352
Medium
PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4748)
CVE-2010-4748
CWE-707
Medium
e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4757)
CVE-2010-4757
CWE-707
Medium
Perl Improper Input Validation Vulnerability (CVE-2010-4777)
CVE-2010-4777
CWE-20
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-4822)
CVE-2010-4822
CWE-200
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5087)
CVE-2010-5087
CWE-264
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4823)
CVE-2010-4823
CWE-707
Medium
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4824)
CVE-2010-4824
CWE-138
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4907)
CVE-2010-4907
CWE-707
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5078)
CVE-2010-5078
CWE-264
Medium
silverstripeCMS Cryptographic Issues Vulnerability (CVE-2010-5079)
CVE-2010-5079
-
Medium
silverstripeCMS Credentials Management Errors Vulnerability (CVE-2010-5080)
CVE-2010-5080
-
Medium
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5084)
CVE-2010-5084
CWE-352
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5294)
CVE-2010-5294
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5296)
CVE-2010-5296
CWE-264
Medium
Oracle Database Server CVE-2011-0799 Vulnerability (CVE-2011-0799)
CVE-2011-0799
-
Medium
SugarCRM Improper Input Validation Vulnerability (CVE-2011-0745)
CVE-2011-0745
CWE-20
Medium
phpBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0544)
CVE-2011-0544
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0653)
CVE-2011-0653
CWE-707
Medium
Django Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0696)
CVE-2011-0696
CWE-352
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0697)
CVE-2011-0697
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
CVE-2011-0701
CWE-200
Medium
Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0707)
CVE-2011-0707
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-0708)
CVE-2011-0708
CWE-119
Medium
PHP Improper Input Validation Vulnerability (CVE-2011-0752)
CVE-2011-0752
CWE-20
Medium
Apache Tomcat Resource Management Errors Vulnerability (CVE-2011-0534)
CVE-2011-0534
-
Medium
PHP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2011-0753)
CVE-2011-0753
CWE-362
Medium
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)
CVE-2011-0754
CWE-59
Medium
PHP Numeric Errors Vulnerability (CVE-2011-0755)
CVE-2011-0755
-
Medium
Perl Other Vulnerability (CVE-2011-0761)
CVE-2011-0761
-
Medium
Oracle Database Server CVE-2011-0785 Vulnerability (CVE-2011-0785)
CVE-2011-0785
-
Medium
Oracle Database Server CVE-2011-0787 Vulnerability (CVE-2011-0787)
CVE-2011-0787
-
Medium
Oracle Database Server CVE-2011-0792 Vulnerability (CVE-2011-0792)
CVE-2011-0792
-
Medium
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0535)
CVE-2011-0535
CWE-352
Medium
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0526)
CVE-2011-0526
CWE-707
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-5298)
CVE-2010-5298
CWE-362
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0047)
CVE-2011-0047
CWE-707
Medium
jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)
CVE-2010-5312
CWE-707
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2011-0003)
CVE-2011-0003
CWE-20
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0013)
CVE-2011-0013
CWE-707
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2011-0014)
CVE-2011-0014
-
Medium