Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4946)
CVE-2011-4946
CWE-138
Medium
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4947)
CVE-2011-4947
CWE-352
Medium
Zenphoto Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-0993)
CVE-2012-0993
CWE-94
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0995)
CVE-2012-0995
CWE-707
Medium
Joomla Cryptographic Issues Vulnerability (CVE-2011-4321)
CVE-2011-4321
-
Medium
Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)
CVE-2012-2928
CWE-264
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2012-2733)
CVE-2012-2733
CWE-20
Medium
Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-2739)
CVE-2012-2739
-
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2741)
CVE-2012-2741
CWE-707
Medium
Joomla CVE-2012-2748 Vulnerability (CVE-2012-2748)
CVE-2012-2748
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2012-2749)
CVE-2012-2749
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2012-2751)
CVE-2012-2751
-
Medium
PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2903)
CVE-2012-2903
CWE-707
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922)
CVE-2012-2922
CWE-200
Medium
Atlassian Confluence Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)
CVE-2012-2928
CWE-264
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2694)
CVE-2012-2694
CWE-264
Medium
Resin Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2012-2968)
CVE-2012-2968
CWE-22
Medium
Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2969)
CVE-2012-2969
CWE-264
Medium
Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-3132)
CVE-2012-3132
CWE-138
Medium
Oracle Database Server CVE-2012-3134 Vulnerability (CVE-2012-3134)
CVE-2012-3134
-
Medium
Oracle Database Server Improper Authentication Vulnerability (CVE-2012-3137)
CVE-2012-3137
CWE-287
Medium
MySQL CVE-2012-3144 Vulnerability (CVE-2012-3144)
CVE-2012-3144
-
Medium
MySQL CVE-2012-3147 Vulnerability (CVE-2012-3147)
CVE-2012-3147
-
Medium
MySQL CVE-2012-3150 Vulnerability (CVE-2012-3150)
CVE-2012-3150
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2698)
CVE-2012-2698
CWE-707
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2012-2686)
CVE-2012-2686
-
Medium
MySQL CVE-2012-3166 Vulnerability (CVE-2012-3166)
CVE-2012-3166
-
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2401)
CVE-2012-2401
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2358)
CVE-2012-2358
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2359)
CVE-2012-2359
CWE-264
Medium
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2363)
CVE-2012-2363
CWE-138
Medium
Moodle Other Vulnerability (CVE-2012-2366)
CVE-2012-2366
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2367)
CVE-2012-2367
CWE-264
Medium
Tornado Improper Input Validation Vulnerability (CVE-2012-2374)
CVE-2012-2374
CWE-20
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-2397)
CVE-2012-2397
CWE-352
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398)
CVE-2012-2398
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2402)
CVE-2012-2402
CWE-264
Medium
Collabtive Improper Input Validation Vulnerability (CVE-2012-2670)
CVE-2012-2670
CWE-20
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2403)
CVE-2012-2403
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2404)
CVE-2012-2404
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2413)
CVE-2012-2413
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2517)
CVE-2012-2517
CWE-707
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2641)
CVE-2012-2641
CWE-707
Medium
PostgreSQL Resource Management Errors Vulnerability (CVE-2012-2655)
CVE-2012-2655
-
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2660)
CVE-2012-2660
CWE-264
Medium
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2661)
CVE-2012-2661
CWE-138
Medium
GlassFish CVE-2012-3155 Vulnerability (CVE-2012-3155)
CVE-2012-3155
-
Medium
MySQL CVE-2012-3173 Vulnerability (CVE-2012-3173)
CVE-2012-3173
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2356)
CVE-2012-2356
CWE-264
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3531)
CVE-2012-3531
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3465)
CVE-2012-3465
CWE-707
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3488)
CVE-2012-3488
CWE-264
Medium
PostgreSQL Improper Input Validation Vulnerability (CVE-2012-3489)
CVE-2012-3489
CWE-20
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3499)
CVE-2012-3499
CWE-707
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3502)
CVE-2012-3502
CWE-200
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3508)
CVE-2012-3508
CWE-707
Medium
TYPO3 Cryptographic Issues Vulnerability (CVE-2012-3527)
CVE-2012-3527
-
Medium
TYPO3 Other Vulnerability (CVE-2012-3530)
CVE-2012-3530
-
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2012-3544)
CVE-2012-3544
CWE-20
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3463)
CVE-2012-3463
CWE-707
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3546)
CVE-2012-3546
CWE-264
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3828)
CVE-2012-3828
CWE-707
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3829)
CVE-2012-3829
CWE-200
Medium
e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3843)
CVE-2012-3843
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4029)
CVE-2012-4029
CWE-707
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-4219)
CVE-2012-4219
CWE-200
Medium
TCExam Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4237)
CVE-2012-4237
CWE-138
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4246)
CVE-2012-4246
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3464)
CVE-2012-3464
CWE-707
Medium
Django Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-3444)
CVE-2012-3444
CWE-119
Medium
MySQL CVE-2012-3177 Vulnerability (CVE-2012-3177)
CVE-2012-3177
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3389)
CVE-2012-3389
CWE-707
Medium
MySQL CVE-2012-3180 Vulnerability (CVE-2012-3180)
CVE-2012-3180
-
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3365)
CVE-2012-3365
CWE-264
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3369)
CVE-2012-3369
CWE-264
Medium