Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2020-14891 Vulnerability (CVE-2020-14891)
CVE-2020-14891
-
Medium
MySQL CVE-2020-14893 Vulnerability (CVE-2020-14893)
CVE-2020-14893
-
Medium
concrete5 CVE-2020-14961 Vulnerability (CVE-2020-14961)
CVE-2020-14961
-
Medium
Mailman Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15011)
CVE-2020-15011
CWE-138
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15041)
CVE-2020-15041
CWE-707
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15073)
CVE-2020-15073
CWE-707
Medium
OpenVPN AS Improper Authentication Vulnerability (CVE-2020-15077)
CVE-2020-15077
CWE-287
Medium
PrestaShop Improper Authentication Vulnerability (CVE-2020-15079)
CVE-2020-15079
CWE-287
Medium
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-15080)
CVE-2020-15080
CWE-200
Medium
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-15081)
CVE-2020-15081
CWE-200
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15083)
CVE-2020-15083
CWE-707
Medium
Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104)
CVE-2020-15104
CWE-346
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15139)
CVE-2020-15139
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15161)
CVE-2020-15161
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15162)
CVE-2020-15162
CWE-707
Medium
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15171)
CVE-2020-15171
CWE-138
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15241)
CVE-2020-15241
CWE-601
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15242)
CVE-2020-15242
CWE-601
Medium
MySQL Out-of-bounds Write Vulnerability (CVE-2020-15358)
CVE-2020-15358
CWE-787
Medium
Sqlite Out-of-bounds Write Vulnerability (CVE-2020-15358)
CVE-2020-15358
CWE-787
Medium
CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15400)
CVE-2020-15400
CWE-352
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15562)
CVE-2020-15562
CWE-707
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15695)
CVE-2020-15695
CWE-352
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15696)
CVE-2020-15696
CWE-707
Medium
Joomla Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-15697)
CVE-2020-15697
CWE-732
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-15698)
CVE-2020-15698
CWE-200
Medium
Joomla Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-15699)
CVE-2020-15699
CWE-345
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15700)
CVE-2020-15700
CWE-352
Medium
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15810)
CVE-2020-15810
CWE-444
Medium
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15811)
CVE-2020-15811
CWE-444
Medium
Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-15839)
CVE-2020-15839
CWE-434
Medium
Liferay Portal CVE-2020-15840 Vulnerability (CVE-2020-15840)
CVE-2020-15840
-
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16145)
CVE-2020-16145
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16192)
CVE-2020-16192
CWE-707
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16193)
CVE-2020-16193
CWE-707
Medium
Owncloud Cross-site Scripting (XSS) Vulnerability (CVE-2020-16255)
CVE-2020-16255
-
Medium
SharePoint CVE-2020-16941 Vulnerability (CVE-2020-16941)
CVE-2020-16941
-
Medium
SharePoint CVE-2020-16942 Vulnerability (CVE-2020-16942)
CVE-2020-16942
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16944)
CVE-2020-16944
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16945)
CVE-2020-16945
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16946)
CVE-2020-16946
CWE-707
Medium
SharePoint CVE-2020-16948 Vulnerability (CVE-2020-16948)
CVE-2020-16948
-
Medium
SharePoint CVE-2020-16950 Vulnerability (CVE-2020-16950)
CVE-2020-16950
-
Medium
SharePoint CVE-2020-16953 Vulnerability (CVE-2020-16953)
CVE-2020-16953
-
Medium
SharePoint CVE-2020-16979 Vulnerability (CVE-2020-16979)
CVE-2020-16979
-
Medium
SharePoint CVE-2020-17015 Vulnerability (CVE-2020-17015)
CVE-2020-17015
-
Medium
SharePoint CVE-2020-17017 Vulnerability (CVE-2020-17017)
CVE-2020-17017
-
Medium
SharePoint CVE-2020-17060 Vulnerability (CVE-2020-17060)
CVE-2020-17060
-
Medium
SharePoint CVE-2020-17061 Vulnerability (CVE-2020-17061)
CVE-2020-17061
-
Medium
SharePoint CVE-2020-17115 Vulnerability (CVE-2020-17115)
CVE-2020-17115
-
Medium
SharePoint CVE-2020-17120 Vulnerability (CVE-2020-17120)
CVE-2020-17120
-
Medium
SharePoint CVE-2020-17121 Vulnerability (CVE-2020-17121)
CVE-2020-17121
-
Medium
SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17372)
CVE-2020-17372
CWE-707
Medium
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-17373)
CVE-2020-17373
CWE-138
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17449)
CVE-2020-17449
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17450)
CVE-2020-17450
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17480)
CVE-2020-17480
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17542)
CVE-2020-17542
CWE-707
Medium
qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18468)
CVE-2020-18468
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18469)
CVE-2020-18469
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18470)
CVE-2020-18470
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18670)
CVE-2020-18670
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18671)
CVE-2020-18671
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19048)
CVE-2020-19048
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19049)
CVE-2020-19049
CWE-707
Medium
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19212)
CVE-2020-19212
CWE-138
Medium
qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19515)
CVE-2020-19515
CWE-707
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19626)
CVE-2020-19626
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1099)
CVE-2020-1099
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1100)
CVE-2020-1100
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1101)
CVE-2020-1101
CWE-707
Medium
SharePoint Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-1103)
CVE-2020-1103
CWE-352
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1104)
CVE-2020-1104
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1106)
CVE-2020-1106
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1107)
CVE-2020-1107
CWE-707
Medium