Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
Dot CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-37033)
CVE-2022-37033
CWE-918
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36108)
CVE-2022-36108
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36107)
CVE-2022-36107
CWE-707
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2022-36106)
CVE-2022-36106
CWE-287
Medium
TYPO3 Observable Discrepancy Vulnerability (CVE-2022-36105)
CVE-2022-36105
CWE-203
Medium
Zope Web Application Server Other Vulnerability (CVE-2006-4684)
CVE-2006-4684
-
Medium
WordPress Other Vulnerability (CVE-2006-4743)
CVE-2006-4743
-
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36097)
CVE-2022-36097
CWE-707
Medium
e107 Other Vulnerability (CVE-2006-4757)
CVE-2006-4757
-
Medium
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-36095)
CVE-2022-36095
CWE-352
Medium
Moodle Other Vulnerability (CVE-2006-4784)
CVE-2006-4784
-
Medium
Moodle Other Vulnerability (CVE-2006-4786)
CVE-2006-4786
-
Medium
e107 Other Vulnerability (CVE-2006-4794)
CVE-2006-4794
-
Medium
Claroline Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4844)
CVE-2006-4844
CWE-94
Medium
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2006-4471)
CVE-2006-4471
CWE-434
Medium
Joomla Improper Input Validation Vulnerability (CVE-2006-4468)
CVE-2006-4468
CWE-20
Medium
Drupal Other Vulnerability (CVE-2006-4120)
CVE-2006-4120
-
Medium
Twisted Web HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-39348)
CVE-2022-39348
CWE-707
Medium
Apache HTTP Server Other Vulnerability (CVE-2006-4154)
CVE-2006-4154
-
Medium
WordPress Ultimate Member Plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-3361)
CVE-2022-3361
CWE-22
Medium
Dolphin Other Vulnerability (CVE-2006-4189)
CVE-2006-4189
-
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3005)
CVE-2022-3005
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3004)
CVE-2022-3004
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3002)
CVE-2022-3002
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3000)
CVE-2022-3000
CWE-707
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2022-39975)
CVE-2022-39975
CWE-862
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2022-39975)
CVE-2022-39975
CWE-862
Medium
MySQL CVE-2022-39410 Vulnerability (CVE-2022-39410)
CVE-2022-39410
-
Medium
MySQL CVE-2022-39408 Vulnerability (CVE-2022-39408)
CVE-2022-39408
-
Medium
MySQL CVE-2022-39404 Vulnerability (CVE-2022-39404)
CVE-2022-39404
-
Medium
MySQL CVE-2022-39402 Vulnerability (CVE-2022-39402)
CVE-2022-39402
-
Medium
MySQL CVE-2022-39400 Vulnerability (CVE-2022-39400)
CVE-2022-39400
-
Medium
MySQL Improper Input Validation Vulnerability (CVE-2006-4227)
CVE-2006-4227
CWE-20
Medium
Joomla Improper Input Validation Vulnerability (CVE-2006-4466)
CVE-2006-4466
CWE-20
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-38902)
CVE-2022-38902
CWE-707
Medium
PmWiki Other Vulnerability (CVE-2006-4453)
CVE-2006-4453
-
Medium
EspoCRM Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2022-38845)
CVE-2022-38845
CWE-1236
Medium
EspoCRM Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-38846)
CVE-2022-38846
CWE-319
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-38901)
CVE-2022-38901
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-38901)
CVE-2022-38901
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-38902)
CVE-2022-38902
CWE-707
Medium
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-39193)
CVE-2022-39193
CWE-668
Medium
Grafana CVE-2022-39307 Vulnerability (CVE-2022-39307)
CVE-2022-39307
-
Medium
MediaWiki Uncontrolled Resource Consumption Vulnerability (CVE-2022-39194)
CVE-2022-39194
CWE-400
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2006-4343)
CVE-2006-4343
CWE-476
Medium
Grafana Improper Authentication Vulnerability (CVE-2022-39229)
CVE-2022-39229
CWE-287
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2006-4339)
CVE-2006-4339
-
Medium
Plone CMS Other Vulnerability (CVE-2006-4249)
CVE-2006-4249
-
Medium
Plone CMS Other Vulnerability (CVE-2006-4247)
CVE-2006-4247
-
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42127)
CVE-2022-42127
CWE-276
Medium
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2022-42128)
CVE-2022-42128
CWE-276
Medium
PHP Other Vulnerability (CVE-2006-1490)
CVE-2006-1490
-
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2023-0465)
CVE-2023-0465
CWE-295
Medium
Claroline Other Vulnerability (CVE-2006-1595)
CVE-2006-1595
-
Medium
phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-0792)
CVE-2023-0792
CWE-94
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0791)
CVE-2023-0791
CWE-707
Medium
phpMyAdmin Other Vulnerability (CVE-2006-1678)
CVE-2006-1678
-
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0787)
CVE-2023-0787
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0786)
CVE-2023-0786
CWE-707
Medium
Plone CMS Other Vulnerability (CVE-2006-1711)
CVE-2006-1711
-
Medium
ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0607)
CVE-2023-0607
CWE-707
Medium
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0606)
CVE-2023-0606
CWE-707
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0594)
CVE-2023-0594
CWE-707
Medium
WordPress Other Vulnerability (CVE-2006-1796)
CVE-2006-1796
-
Medium
PHP Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2023-0567)
CVE-2023-0567
CWE-916
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0507)
CVE-2023-0507
CWE-707
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2023-0466)
CVE-2023-0466
CWE-295
Medium
phpMyAdmin Other Vulnerability (CVE-2006-1803)
CVE-2006-1803
-
Medium
phpMyFAQ Misinterpretation of Input Vulnerability (CVE-2023-0880)
CVE-2023-0880
CWE-115
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0314)
CVE-2023-0314
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0313)
CVE-2023-0313
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0312)
CVE-2023-0312
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0310)
CVE-2023-0310
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0309)
CVE-2023-0309
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0308)
CVE-2023-0308
CWE-707
Medium