🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15405 vulnerabilities
in this category.
Critical: 1674
High: 4167
Medium: 8767
Low: 793
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Improper Authentication Vulnerability (CVE-2014-0166)
CVE-2014-0166
CWE-287
Medium
Jolokia Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0168)
CVE-2014-0168
CWE-352
Medium
Jboss EAP Incorrect Authorization Vulnerability (CVE-2014-0169)
CVE-2014-0169
CWE-863
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0195)
CVE-2014-0195
CWE-119
Medium
MySQL CVE-2014-0402 Vulnerability (CVE-2014-0402)
CVE-2014-0402
-
Medium
MySQL CVE-2014-0433 Vulnerability (CVE-2014-0433)
CVE-2014-0433
-
Medium
Apache HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-2050)
CVE-2014-2050
CWE-352
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1754)
CVE-2014-1754
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1840)
CVE-2014-1840
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1855)
CVE-2014-1855
CWE-707
Medium
PHP Improper Handling of Exceptional Conditions Vulnerability (CVE-2014-1943)
CVE-2014-1943
CWE-755
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1980)
CVE-2014-1980
CWE-707
Medium
PHP Numeric Errors Vulnerability (CVE-2014-2020)
CVE-2014-2020
-
Medium
ownCloud Improper Authentication Vulnerability (CVE-2014-2047)
CVE-2014-2047
CWE-287
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2049)
CVE-2014-2049
CWE-264
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2057)
CVE-2014-2057
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1665)
CVE-2014-1665
CWE-707
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2058)
CVE-2014-2058
CWE-264
Medium
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2059)
CVE-2014-2059
CWE-22
Medium
Jenkins CVE-2014-2060 Vulnerability (CVE-2014-2060)
CVE-2014-2060
-
Medium
Jenkins Cryptographic Issues Vulnerability (CVE-2014-2061)
CVE-2014-2061
-
Medium
Jenkins Improper Authentication Vulnerability (CVE-2014-2062)
CVE-2014-2062
CWE-287
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-2064)
CVE-2014-2064
CWE-200
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2065)
CVE-2014-2065
CWE-707
Medium
Jenkins Improper Authentication Vulnerability (CVE-2014-2066)
CVE-2014-2066
CWE-287
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-1686)
CVE-2014-1686
CWE-200
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2014-1610)
CVE-2014-1610
CWE-20
Medium
Oracle JRE CVE-2014-0449 Vulnerability (CVE-2014-0449)
CVE-2014-0449
-
Medium
Django Resource Management Errors Vulnerability (CVE-2014-0481)
CVE-2014-0481
-
Medium
Oracle JRE CVE-2014-0453 Vulnerability (CVE-2014-0453)
CVE-2014-0453
-
Medium
Oracle JRE CVE-2014-0459 Vulnerability (CVE-2014-0459)
CVE-2014-0459
-
Medium
Oracle JRE CVE-2014-0460 Vulnerability (CVE-2014-0460)
CVE-2014-0460
-
Medium
Oracle JRE CVE-2014-0463 Vulnerability (CVE-2014-0463)
CVE-2014-0463
-
Medium
Oracle JRE CVE-2014-0464 Vulnerability (CVE-2014-0464)
CVE-2014-0464
-
Medium
Django Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0472)
CVE-2014-0472
CWE-94
Medium
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0473)
CVE-2014-0473
CWE-264
Medium
Django Improper Input Validation Vulnerability (CVE-2014-0480)
CVE-2014-0480
CWE-20
Medium
Django Improper Authentication Vulnerability (CVE-2014-0482)
CVE-2014-0482
CWE-287
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1607)
CVE-2014-1607
CWE-707
Medium
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0813)
CVE-2014-0813
CWE-352
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0814)
CVE-2014-0814
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-100024)
CVE-2014-100024
CWE-707
Medium
Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-10022)
CVE-2014-10022
CWE-119
Medium
FluxBB Other Vulnerability (CVE-2014-10030)
CVE-2014-10030
-
Medium
easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1403)
CVE-2014-1403
CWE-707
Medium
Django CVE-2014-1418 Vulnerability (CVE-2014-1418)
CVE-2014-1418
-
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-1476)
CVE-2014-1476
CWE-264
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0099)
CVE-2014-0099
-
Medium
Oracle HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
Oracle Database Server CVE-2013-5853 Vulnerability (CVE-2013-5853)
CVE-2013-5853
-
Medium
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2013-6501)
CVE-2013-6501
CWE-138
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2013-6449)
CVE-2013-6449
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2013-6450)
CVE-2013-6450
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6451)
CVE-2013-6451
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6452)
CVE-2013-6452
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6454)
CVE-2013-6454
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6455)
CVE-2013-6455
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6472)
CVE-2013-6472
CWE-200
Medium
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6495)
CVE-2013-6495
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-6712)
CVE-2013-6712
CWE-119
Medium
Apache HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
CVE-2013-6438
-
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6780)
CVE-2013-6780
CWE-707
Medium
Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6787)
CVE-2013-6787
CWE-138
Medium
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6789)
CVE-2013-6789
CWE-200
Medium
Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6872)
CVE-2013-6872
CWE-138
Medium
Python Cryptographic Issues Vulnerability (CVE-2013-7040)
CVE-2013-7040
-
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-7060)
CVE-2013-7060
CWE-200
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7061)
CVE-2013-7061
CWE-264
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7062)
CVE-2013-7062
CWE-707
Medium
Oracle HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
CVE-2013-6438
-
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6417)
CVE-2013-6417
CWE-264
Medium
TYPO3 Cryptographic Issues Vulnerability (CVE-2013-7075)
CVE-2013-7075
-
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6168)
CVE-2013-6168
CWE-707
Medium
Oracle Database Server CVE-2013-5858 Vulnerability (CVE-2013-5858)
CVE-2013-5858
-
Medium
«
1
...
136
137
138
...
206
»