Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9758)
CVE-2014-9758
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9652)
CVE-2014-9652
CWE-119
Medium
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685)
CVE-2014-9685
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9709)
CVE-2014-9709
CWE-119
Medium
Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)
CVE-2014-9720
-
Medium
Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)
CVE-2014-9749
CWE-264
Medium
ATutor Other Vulnerability (CVE-2014-9752)
CVE-2014-9752
-
Medium
ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-2039)
CVE-2013-2039
CWE-22
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9032)
CVE-2014-9032
CWE-707
Medium
Drupal CVE-2014-9016 Vulnerability (CVE-2014-9016)
CVE-2014-9016
-
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0220)
CVE-2015-0220
CWE-707
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7818)
CVE-2014-7818
CWE-22
Medium
Python Numeric Errors Vulnerability (CVE-2014-7185)
CVE-2014-7185
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7199)
CVE-2014-7199
CWE-707
Medium
ownCloud Other Vulnerability (CVE-2013-2089)
CVE-2013-2089
-
Medium
Joomla CVE-2014-7229 Vulnerability (CVE-2014-7229)
CVE-2014-7229
-
Medium
Apache Tomcat Improper Access Control Vulnerability (CVE-2014-7810)
CVE-2014-7810
CWE-284
Medium
Undertow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7816)
CVE-2014-7816
CWE-22
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7829)
CVE-2014-7829
CWE-22
Medium
Squid Improper Input Validation Vulnerability (CVE-2014-7142)
CVE-2014-7142
CWE-20
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7831)
CVE-2014-7831
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7832)
CVE-2014-7832
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7833)
CVE-2014-7833
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7834)
CVE-2014-7834
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7836)
CVE-2014-7836
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7837)
CVE-2014-7837
CWE-264
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2092)
CVE-2013-2092
CWE-707
Medium
Squid Data Processing Errors Vulnerability (CVE-2014-7141)
CVE-2014-7141
-
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2086)
CVE-2013-2086
CWE-200
Medium
MySQL CVE-2014-6559 Vulnerability (CVE-2014-6559)
CVE-2014-6559
-
Medium
Oracle Database Server CVE-2014-6541 Vulnerability (CVE-2014-6541)
CVE-2014-6541
-
Medium
Oracle Database Server CVE-2014-6542 Vulnerability (CVE-2014-6542)
CVE-2014-6542
-
Medium
MongoDb Other Vulnerability (CVE-2013-2132)
CVE-2013-2132
-
Medium
Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2119)
CVE-2013-2119
CWE-264
Medium
Oracle Database Server CVE-2014-6547 Vulnerability (CVE-2014-6547)
CVE-2014-6547
-
Medium
MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)
CVE-2014-6555
-
Medium
MediaWiki Other Vulnerability (CVE-2013-2114)
CVE-2013-2114
-
Medium
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-7137)
CVE-2014-7137
CWE-138
Medium
Oracle Database Server CVE-2014-6563 Vulnerability (CVE-2014-6563)
CVE-2014-6563
-
Medium
MySQL CVE-2014-6564 Vulnerability (CVE-2014-6564)
CVE-2014-6564
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-2110)
CVE-2013-2110
CWE-119
Medium
Oracle Database Server CVE-2014-6577 Vulnerability (CVE-2014-6577)
CVE-2014-6577
-
Medium
Oracle Database Server CVE-2014-6578 Vulnerability (CVE-2014-6578)
CVE-2014-6578
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-6631)
CVE-2014-6631
CWE-707
Medium
Python Resource Management Errors Vulnerability (CVE-2013-2099)
CVE-2013-2099
-
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7838)
CVE-2014-7838
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7846)
CVE-2014-7846
CWE-264
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)
CVE-2014-9015
CWE-264
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)
CVE-2014-8774
CWE-707
Medium
MongoDb Improper Authentication Vulnerability (CVE-2014-8180)
CVE-2014-8180
CWE-287
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-8275)
CVE-2014-8275
-
Medium
YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8488)
CVE-2014-8488
CWE-707
Medium
Nginx CVE-2013-2070 Vulnerability (CVE-2013-2070)
CVE-2013-2070
-
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2013-2067)
CVE-2013-2067
CWE-287
Medium
MODX Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-8773)
CVE-2014-8773
CWE-352
Medium
MODX Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-8775)
CVE-2014-8775
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2079)
CVE-2013-2079
CWE-264
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8793)
CVE-2014-8793
CWE-707
Medium
ReviveAdserver Other Vulnerability (CVE-2014-8875)
CVE-2014-8875
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)
CVE-2014-8958
CWE-707
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8959)
CVE-2014-8959
CWE-22
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8961)
CVE-2014-8961
CWE-22
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8992)
CVE-2014-8992
CWE-707
Medium
PostgreSQL Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2014-8161)
CVE-2014-8161
CWE-209
Medium
Apache HTTP Server Incorrect Authorization Vulnerability (CVE-2014-8109)
CVE-2014-8109
CWE-863
Medium
Moodle Resource Management Errors Vulnerability (CVE-2014-7847)
CVE-2014-7847
-
Medium
Moodle Improper Input Validation Vulnerability (CVE-2013-2083)
CVE-2013-2083
CWE-20
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7848)
CVE-2014-7848
CWE-200
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7849)
CVE-2014-7849
CWE-264
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7853)
CVE-2014-7853
CWE-200
Medium
ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-2085)
CVE-2013-2085
CWE-22
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7982)
CVE-2014-7982
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7983)
CVE-2014-7983
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2082)
CVE-2013-2082
CWE-264
Medium
OpenVPN AS Resource Management Errors Vulnerability (CVE-2014-8104)
CVE-2014-8104
-
Medium