🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15072 vulnerabilities
in this category.
Critical: 1617
High: 4043
Medium: 8626
Low: 784
Information: 2
Vulnerability Name
CVE
CWE
Severity
Moodle Incorrect Authorization Vulnerability (CVE-2024-48901)
CVE-2024-48901
CWE-863
Medium
SharePoint CVE-2024-49062 Vulnerability (CVE-2024-49062)
CVE-2024-49062
-
Medium
SharePoint CVE-2024-49064 Vulnerability (CVE-2024-49064)
CVE-2024-49064
-
Medium
MediaWiki Improper Privilege Management Vulnerability (CVE-2021-44857)
CVE-2021-44857
CWE-269
Medium
SharePoint CVE-2024-49065 Vulnerability (CVE-2024-49065)
CVE-2024-49065
-
Medium
MediaWiki Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-44856)
CVE-2021-44856
CWE-754
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44855)
CVE-2021-44855
CWE-707
Medium
WebLogic Improper Input Validation Vulnerability (CVE-2021-44832)
CVE-2021-44832
CWE-20
Medium
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-43946)
CVE-2021-43946
CWE-287
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44025)
CVE-2021-44025
CWE-707
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2021-43948)
CVE-2021-43948
CWE-863
Medium
AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-50802)
CVE-2024-50802
CWE-138
Medium
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-43950)
CVE-2021-43950
CWE-287
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952)
CVE-2021-43952
CWE-352
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43953)
CVE-2021-43953
CWE-352
Medium
Nexus Repository Manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-43961)
CVE-2021-43961
CWE-138
Medium
AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-50801)
CVE-2024-50801
CWE-138
Medium
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)
CVE-2021-44528
CWE-601
Medium
Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-50337)
CVE-2024-50337
CWE-918
Medium
WP Plugin Contact Form 7 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-4704)
CVE-2024-4704
CWE-601
Medium
CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44076)
CVE-2021-44076
CWE-707
Medium
WP Plugin Advanced Custom Fields CVE-2024-4565 Vulnerability (CVE-2024-4565)
CVE-2024-4565
-
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2024-4317)
CVE-2024-4317
CWE-862
Medium
Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-49766)
CVE-2024-49766
CWE-22
Medium
Moodle Cleartext Storage of Sensitive Information Vulnerability (CVE-2024-43429)
CVE-2024-43429
CWE-312
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2022-0984)
CVE-2022-0984
CWE-863
Medium
AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42050)
CVE-2021-42050
CWE-707
Medium
MySQL CVE-2022-21348 Vulnerability (CVE-2022-21348)
CVE-2022-21348
-
Medium
MySQL CVE-2022-21370 Vulnerability (CVE-2022-21370)
CVE-2022-21370
-
Medium
MySQL CVE-2022-21368 Vulnerability (CVE-2022-21368)
CVE-2022-21368
-
Medium
MySQL CVE-2022-21367 Vulnerability (CVE-2022-21367)
CVE-2022-21367
-
Medium
Oracle JRE CVE-2022-21366 Vulnerability (CVE-2022-21366)
CVE-2022-21366
-
Medium
Oracle JRE CVE-2022-21365 Vulnerability (CVE-2022-21365)
CVE-2022-21365
-
Medium
MySQL CVE-2022-21363 Vulnerability (CVE-2022-21363)
CVE-2022-21363
-
Medium
MySQL CVE-2022-21362 Vulnerability (CVE-2022-21362)
CVE-2022-21362
-
Medium
WebLogic CVE-2022-21361 Vulnerability (CVE-2022-21361)
CVE-2022-21361
-
Medium
Oracle JRE CVE-2022-21360 Vulnerability (CVE-2022-21360)
CVE-2022-21360
-
Medium
MySQL CVE-2022-21358 Vulnerability (CVE-2022-21358)
CVE-2022-21358
-
Medium
MySQL CVE-2022-21356 Vulnerability (CVE-2022-21356)
CVE-2022-21356
-
Medium
WebLogic CVE-2022-21353 Vulnerability (CVE-2022-21353)
CVE-2022-21353
-
Medium
MySQL CVE-2022-21352 Vulnerability (CVE-2022-21352)
CVE-2022-21352
-
Medium
WebLogic CVE-2022-21350 Vulnerability (CVE-2022-21350)
CVE-2022-21350
-
Medium
WebLogic CVE-2022-21347 Vulnerability (CVE-2022-21347)
CVE-2022-21347
-
Medium
MySQL CVE-2022-21374 Vulnerability (CVE-2022-21374)
CVE-2022-21374
-
Medium
MySQL CVE-2022-21344 Vulnerability (CVE-2022-21344)
CVE-2022-21344
-
Medium
MySQL CVE-2022-21342 Vulnerability (CVE-2022-21342)
CVE-2022-21342
-
Medium
Oracle JRE CVE-2022-21341 Vulnerability (CVE-2022-21341)
CVE-2022-21341
-
Medium
Oracle JRE CVE-2022-21340 Vulnerability (CVE-2022-21340)
CVE-2022-21340
-
Medium
MySQL CVE-2022-21339 Vulnerability (CVE-2022-21339)
CVE-2022-21339
-
Medium
MySQL CVE-2022-21337 Vulnerability (CVE-2022-21337)
CVE-2022-21337
-
Medium
MySQL CVE-2022-21336 Vulnerability (CVE-2022-21336)
CVE-2022-21336
-
Medium
MySQL CVE-2022-21335 Vulnerability (CVE-2022-21335)
CVE-2022-21335
-
Medium
MySQL CVE-2022-21334 Vulnerability (CVE-2022-21334)
CVE-2022-21334
-
Medium
MySQL CVE-2022-21332 Vulnerability (CVE-2022-21332)
CVE-2022-21332
-
Medium
MySQL CVE-2022-21331 Vulnerability (CVE-2022-21331)
CVE-2022-21331
-
Medium
MySQL CVE-2022-21330 Vulnerability (CVE-2022-21330)
CVE-2022-21330
-
Medium
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41665)
CVE-2024-41665
CWE-707
Medium
MySQL CVE-2022-21329 Vulnerability (CVE-2022-21329)
CVE-2022-21329
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40747)
CVE-2024-40747
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40743)
CVE-2024-40743
CWE-707
Medium
MySQL CVE-2022-21327 Vulnerability (CVE-2022-21327)
CVE-2022-21327
-
Medium
MySQL CVE-2022-21478 Vulnerability (CVE-2022-21478)
CVE-2022-21478
-
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-40603)
CVE-2024-40603
CWE-352
Medium
WebLogic CVE-2022-21560 Vulnerability (CVE-2022-21560)
CVE-2022-21560
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40604)
CVE-2024-40604
CWE-707
Medium
WebLogic CVE-2022-21557 Vulnerability (CVE-2022-21557)
CVE-2022-21557
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40605)
CVE-2024-40605
CWE-707
Medium
Oracle JRE CVE-2022-21549 Vulnerability (CVE-2022-21549)
CVE-2022-21549
-
Medium
WebLogic CVE-2022-21548 Vulnerability (CVE-2022-21548)
CVE-2022-21548
-
Medium
Oracle JRE CVE-2022-21541 Vulnerability (CVE-2022-21541)
CVE-2022-21541
-
Medium
Oracle JRE CVE-2022-21540 Vulnerability (CVE-2022-21540)
CVE-2022-21540
-
Medium
MySQL CVE-2022-21489 Vulnerability (CVE-2022-21489)
CVE-2022-21489
-
Medium
MySQL CVE-2022-21483 Vulnerability (CVE-2022-21483)
CVE-2022-21483
-
Medium
MySQL CVE-2022-21482 Vulnerability (CVE-2022-21482)
CVE-2022-21482
-
Medium
GeoServer Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40625)
CVE-2024-40625
CWE-918
Medium
«
1
...
115
116
117
...
201
»