Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3736)
CVE-2017-3736
CWE-200
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5553)
CVE-2017-5553
CWE-707
Medium
MySQL CVE-2012-0120 Vulnerability (CVE-2012-0120)
CVE-2012-0120
-
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6820)
CVE-2017-6820
CWE-707
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6483)
CVE-2017-6483
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6003)
CVE-2017-6003
CWE-707
Medium
Oracle Database Server CVE-2012-0082 Vulnerability (CVE-2012-0082)
CVE-2012-0082
-
Medium
TYPO3 Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-6370)
CVE-2017-6370
CWE-319
Medium
Oracle Database Server CVE-2012-0072 Vulnerability (CVE-2012-0072)
CVE-2012-0072
-
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0057)
CVE-2012-0057
CWE-264
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6446)
CVE-2017-6446
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)
CVE-2017-6514
CWE-200
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5877)
CVE-2017-5877
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6814)
CVE-2017-6814
CWE-707
Medium
WordPress Improper Input Validation Vulnerability (CVE-2017-6815)
CVE-2017-6815
CWE-20
Medium
WordPress Incorrect Authorization Vulnerability (CVE-2017-6816)
CVE-2017-6816
CWE-863
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6817)
CVE-2017-6817
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6818)
CVE-2017-6818
CWE-707
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819)
CVE-2017-6819
CWE-352
Medium
MySQL CVE-2012-0087 Vulnerability (CVE-2012-0087)
CVE-2012-0087
-
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5876)
CVE-2017-5876
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610)
CVE-2017-5610
CWE-200
Medium
GlassFish CVE-2012-0104 Vulnerability (CVE-2012-0104)
CVE-2012-0104
-
Medium
MySQL CVE-2012-0119 Vulnerability (CVE-2012-0119)
CVE-2012-0119
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5612)
CVE-2017-5612
CWE-707
Medium
MySQL CVE-2012-0118 Vulnerability (CVE-2012-0118)
CVE-2012-0118
-
Medium
MySQL CVE-2012-0116 Vulnerability (CVE-2012-0116)
CVE-2012-0116
-
Medium
MySQL CVE-2012-0115 Vulnerability (CVE-2012-0115)
CVE-2012-0115
-
Medium
MySQL CVE-2012-0113 Vulnerability (CVE-2012-0113)
CVE-2012-0113
-
Medium
MySQL CVE-2012-0102 Vulnerability (CVE-2012-0102)
CVE-2012-0102
-
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5875)
CVE-2017-5875
CWE-707
Medium
MySQL CVE-2012-0101 Vulnerability (CVE-2012-0101)
CVE-2012-0101
-
Medium
ReviveAdserver Session Fixation Vulnerability (CVE-2017-5831)
CVE-2017-5831
CWE-384
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5832)
CVE-2017-5832
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5833)
CVE-2017-5833
CWE-707
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5866)
CVE-2017-5866
CWE-200
Medium
ownCloud Uncontrolled Resource Consumption Vulnerability (CVE-2017-5867)
CVE-2017-5867
CWE-400
Medium
OpenVPN AS Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2017-5868)
CVE-2017-5868
CWE-707
Medium
PHP Improper Input Validation Vulnerability (CVE-2012-0788)
CVE-2012-0788
CWE-20
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17868)
CVE-2017-17868
CWE-707
Medium
Tornado Improper Input Validation Vulnerability (CVE-2012-2374)
CVE-2012-2374
CWE-20
Medium
Plone CMS CVE-2017-1000483 Vulnerability (CVE-2017-1000483)
CVE-2017-1000483
-
Medium
MySQL CVE-2012-1735 Vulnerability (CVE-2012-1735)
CVE-2012-1735
-
Medium
MySQL CVE-2012-1734 Vulnerability (CVE-2012-1734)
CVE-2012-1734
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000425)
CVE-2017-1000425
CWE-707
Medium
Oracle JRE CVE-2012-1726 Vulnerability (CVE-2012-1726)
CVE-2012-1726
-
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000481)
CVE-2017-1000481
CWE-601
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000482)
CVE-2017-1000482
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000484)
CVE-2017-1000484
CWE-601
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)
CVE-2017-1000399
CWE-200
Medium
Oracle JRE CVE-2012-1724 Vulnerability (CVE-2012-1724)
CVE-2012-1724
-
Medium
Oracle JRE CVE-2012-1719 Vulnerability (CVE-2012-1719)
CVE-2012-1719
-
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000509)
CVE-2017-1000509
CWE-707
Medium
Oracle Database Server CVE-2012-1708 Vulnerability (CVE-2012-1708)
CVE-2012-1708
-
Medium
MySQL CVE-2012-1705 Vulnerability (CVE-2012-1705)
CVE-2012-1705
-
Medium
MySQL CVE-2012-1703 Vulnerability (CVE-2012-1703)
CVE-2012-1703
-
Medium
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)
CVE-2017-1000400
CWE-862
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000398)
CVE-2017-1000398
CWE-200
Medium
WebLogic CVE-2017-10123 Vulnerability (CVE-2017-10123)
CVE-2017-10123
-
Medium
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-1000355)
CVE-2017-1000355
CWE-502
Medium
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1860)
CVE-2012-1860
CWE-264
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1859)
CVE-2012-1859
CWE-707
Medium
Dot CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1826)
CVE-2012-1826
CWE-264
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000223)
CVE-2017-1000223
CWE-707
Medium
MySQL CVE-2012-1757 Vulnerability (CVE-2012-1757)
CVE-2012-1757
-
Medium
MySQL CVE-2012-1756 Vulnerability (CVE-2012-1756)
CVE-2012-1756
-
Medium
Oracle Database Server CVE-2012-1751 Vulnerability (CVE-2012-1751)
CVE-2012-1751
-
Medium
Jenkins Improper Certificate Validation Vulnerability (CVE-2017-1000396)
CVE-2017-1000396
CWE-295
Medium
Oracle Database Server CVE-2012-1747 Vulnerability (CVE-2012-1747)
CVE-2012-1747
-
Medium
Oracle Database Server CVE-2012-1746 Vulnerability (CVE-2012-1746)
CVE-2012-1746
-
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)
CVE-2017-1000392
CWE-707
Medium
Oracle Database Server CVE-2012-1745 Vulnerability (CVE-2012-1745)
CVE-2012-1745
-
Medium
Oracle Database Server CVE-2012-1737 Vulnerability (CVE-2012-1737)
CVE-2012-1737
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000395)
CVE-2017-1000395
CWE-200
Medium
WebLogic CVE-2017-10063 Vulnerability (CVE-2017-10063)
CVE-2017-10063
-
Medium