Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9411)
CVE-2016-9411
CWE-200
Medium
MyBB Improper Access Control Vulnerability (CVE-2016-9413)
CVE-2016-9413
CWE-284
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9419)
CVE-2016-9419
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9421)
CVE-2016-9421
CWE-707
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9449)
CVE-2016-9449
CWE-200
Medium
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-9451)
CVE-2016-9451
CWE-601
Medium
Drupal Improper Input Validation Vulnerability (CVE-2016-9452)
CVE-2016-9452
CWE-20
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9454)
CVE-2016-9454
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9457)
CVE-2016-9457
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9459)
CVE-2016-9459
CWE-707
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9460)
CVE-2016-9460
CWE-284
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9461)
CVE-2016-9461
CWE-284
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9462)
CVE-2016-9462
CWE-284
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9465)
CVE-2016-9465
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9466)
CVE-2016-9466
CWE-707
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9467)
CVE-2016-9467
CWE-284
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9468)
CVE-2016-9468
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9472)
CVE-2016-9472
CWE-707
Medium
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-9585)
CVE-2016-9585
CWE-502
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9681)
CVE-2016-9681
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9700)
CVE-2016-9700
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9701)
CVE-2016-9701
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9733)
CVE-2016-9733
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9735)
CVE-2016-9735
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9746)
CVE-2016-9746
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9751)
CVE-2016-9751
CWE-707
Medium
phpMyAdmin Cryptographic Issues Vulnerability (CVE-2016-9847)
CVE-2016-9847
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9848)
CVE-2016-9848
CWE-200
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9850)
CVE-2016-9850
-
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9851)
CVE-2016-9851
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9852)
CVE-2016-9852
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9853)
CVE-2016-9853
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9854)
CVE-2016-9854
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9855)
CVE-2016-9855
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9856)
CVE-2016-9856
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9857)
CVE-2016-9857
CWE-707
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9858)
CVE-2016-9858
CWE-20
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9859)
CVE-2016-9859
CWE-20
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9860)
CVE-2016-9860
CWE-20
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9891)
CVE-2016-9891
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9973)
CVE-2016-9973
CWE-707
Medium
ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0256)
CVE-2017-0256
CWE-20
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0363)
CVE-2017-0363
CWE-601
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0364)
CVE-2017-0364
CWE-601
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-0365)
CVE-2017-0365
CWE-707
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0366)
CVE-2017-0366
CWE-20
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0368)
CVE-2017-0368
CWE-20
Medium
MediaWiki Incorrect Default Permissions Vulnerability (CVE-2017-0369)
CVE-2017-0369
CWE-276
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0370)
CVE-2017-0370
CWE-20
Medium
phpMyAdmin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000013)
CVE-2017-1000013
CWE-601
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000015)
CVE-2017-1000015
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000223)
CVE-2017-1000223
CWE-707
Medium
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-1000355)
CVE-2017-1000355
CWE-502
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)
CVE-2017-1000392
CWE-707
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000395)
CVE-2017-1000395
CWE-200
Medium
Jenkins Improper Certificate Validation Vulnerability (CVE-2017-1000396)
CVE-2017-1000396
CWE-295
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000398)
CVE-2017-1000398
CWE-200
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)
CVE-2017-1000399
CWE-200
Medium
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)
CVE-2017-1000400
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000425)
CVE-2017-1000425
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000481)
CVE-2017-1000481
CWE-601
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000482)
CVE-2017-1000482
CWE-707
Medium
Plone CMS CVE-2017-1000483 Vulnerability (CVE-2017-1000483)
CVE-2017-1000483
-
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000484)
CVE-2017-1000484
CWE-601
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000509)
CVE-2017-1000509
CWE-707
Medium
WebLogic CVE-2017-10063 Vulnerability (CVE-2017-10063)
CVE-2017-10063
-
Medium
WebLogic CVE-2017-10123 Vulnerability (CVE-2017-10123)
CVE-2017-10123
-
Medium
WebLogic CVE-2017-10148 Vulnerability (CVE-2017-10148)
CVE-2017-10148
-
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10152)
CVE-2017-10152
CWE-200
Medium
MySQL CVE-2017-10165 Vulnerability (CVE-2017-10165)
CVE-2017-10165
-
Medium
MySQL CVE-2017-10167 Vulnerability (CVE-2017-10167)
CVE-2017-10167
-
Medium
WebLogic CVE-2017-10178 Vulnerability (CVE-2017-10178)
CVE-2017-10178
-
Medium
MySQL CVE-2017-10227 Vulnerability (CVE-2017-10227)
CVE-2017-10227
-
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)
CVE-2017-10268
CWE-200
Medium
Oracle JRE CVE-2017-10274 Vulnerability (CVE-2017-10274)
CVE-2017-10274
-
Medium