Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
Django Improper Access Control Vulnerability (CVE-2016-2048)
CVE-2016-2048
CWE-284
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2040)
CVE-2016-2040
CWE-707
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5665)
CVE-2012-5665
CWE-264
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2042)
CVE-2016-2042
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2043)
CVE-2016-2043
CWE-707
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2044)
CVE-2016-2044
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2045)
CVE-2016-2045
CWE-707
Medium
MySQL 7PK - Security Features Vulnerability (CVE-2016-2047)
CVE-2016-2047
-
Medium
MySQL Configuration Vulnerability (CVE-2012-5613)
CVE-2012-5613
-
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)
CVE-2016-2178
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2986)
CVE-2016-2986
CWE-707
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-2562)
CVE-2016-2562
CWE-20
Medium
Plone CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5500)
CVE-2012-5500
CWE-352
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5499)
CVE-2012-5499
-
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5498)
CVE-2012-5498
CWE-264
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)
CVE-2016-2559
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2560)
CVE-2016-2560
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2561)
CVE-2016-2561
CWE-707
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5497)
CVE-2012-5497
CWE-200
Medium
Squid Improper Input Validation Vulnerability (CVE-2016-2390)
CVE-2016-2390
CWE-20
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5496)
CVE-2012-5496
-
Medium
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5495)
CVE-2012-5495
CWE-94
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5494)
CVE-2012-5494
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2864)
CVE-2016-2864
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2865)
CVE-2016-2865
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2926)
CVE-2016-2926
CWE-707
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5501)
CVE-2012-5501
CWE-264
Medium
Plone CMS CVE-2012-5503 Vulnerability (CVE-2012-5503)
CVE-2012-5503
-
Medium
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5611)
CVE-2012-5611
CWE-119
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2190)
CVE-2016-2190
CWE-264
Medium
ownCloud Improper Input Validation Vulnerability (CVE-2012-5610)
CVE-2012-5610
CWE-20
Medium
ownCloud Other Vulnerability (CVE-2012-5609)
CVE-2012-5609
-
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5608)
CVE-2012-5608
CWE-707
Medium
ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607)
CVE-2012-5607
-
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5606)
CVE-2012-5606
CWE-707
Medium
Jboss EAP Cryptographic Issues Vulnerability (CVE-2012-5575)
CVE-2012-5575
-
Medium
Apache Tomcat CVE-2012-5568 Vulnerability (CVE-2012-5568)
CVE-2012-5568
-
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5504)
CVE-2012-5504
CWE-707
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)
CVE-2016-2212
CWE-200
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2012-5533)
CVE-2012-5533
-
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5508)
CVE-2012-5508
CWE-200
Medium
Zope Web Application Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)
CVE-2012-5507
CWE-362
Medium
Plone CMS Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2012-5507)
CVE-2012-5507
CWE-362
Medium
Plone CMS Resource Management Errors Vulnerability (CVE-2012-5506)
CVE-2012-5506
-
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5505)
CVE-2012-5505
CWE-200
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9460)
CVE-2016-9460
CWE-284
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9462)
CVE-2016-9462
CWE-284
Medium
Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8864)
CVE-2015-8864
-
Medium
PostgreSQL Resource Management Errors Vulnerability (CVE-2009-0922)
CVE-2009-0922
-
Medium
Oracle Database Server CVE-2012-0512 Vulnerability (CVE-2012-0512)
CVE-2012-0512
-
Medium
Oracle Database Server CVE-2012-0511 Vulnerability (CVE-2012-0511)
CVE-2012-0511
-
Medium
Oracle Database Server CVE-2012-0510 Vulnerability (CVE-2012-0510)
CVE-2012-0510
-
Medium
Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-3188)
CVE-2017-3188
CWE-22
Medium
Oracle JRE CVE-2012-0506 Vulnerability (CVE-2012-0506)
CVE-2012-0506
-
Medium
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-17373)
CVE-2020-17373
CWE-138
Medium
MySQL CVE-2017-3243 Vulnerability (CVE-2017-3243)
CVE-2017-3243
-
Medium
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-2666)
CVE-2017-2666
CWE-444
Medium
MySQL CVE-2017-3244 Vulnerability (CVE-2017-3244)
CVE-2017-3244
-
Medium
GlassFish CVE-2017-3247 Vulnerability (CVE-2017-3247)
CVE-2017-3247
-
Medium
Oracle JRE CVE-2012-0502 Vulnerability (CVE-2012-0502)
CVE-2012-0502
-
Medium
MySQL CVE-2017-3251 Vulnerability (CVE-2017-3251)
CVE-2017-3251
-
Medium
MySQL Improper Input Validation Vulnerability (CVE-2017-3256)
CVE-2017-3256
CWE-20
Medium
MySQL Improper Privilege Management Vulnerability (CVE-2017-3257)
CVE-2017-3257
CWE-269
Medium
Oracle Database Server CVE-2012-0520 Vulnerability (CVE-2012-0520)
CVE-2012-0520
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2645)
CVE-2017-2645
CWE-707
Medium
MySQL CVE-2017-3265 Vulnerability (CVE-2017-3265)
CVE-2017-3265
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2609)
CVE-2017-2609
CWE-200
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2601)
CVE-2017-2601
CWE-707
Medium
Jenkins CVE-2017-2602 Vulnerability (CVE-2017-2602)
CVE-2017-2602
-
Medium
Jenkins Improper Authentication Vulnerability (CVE-2017-2604)
CVE-2017-2604
CWE-287
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2606)
CVE-2017-2606
CWE-200
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2607)
CVE-2017-2607
CWE-707
Medium
Oracle Database Server CVE-2012-0526 Vulnerability (CVE-2012-0526)
CVE-2012-0526
-
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2610)
CVE-2017-2610
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2644)
CVE-2017-2644
CWE-707
Medium