Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
TYPO3 Session Fixation Vulnerability (CVE-2010-3671)
CVE-2010-3671
CWE-384
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3672)
CVE-2010-3672
CWE-707
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3673)
CVE-2010-3673
CWE-200
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3674)
CVE-2010-3674
CWE-707
Medium
MySQL Other Vulnerability (CVE-2010-3676)
CVE-2010-3676
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2010-3677)
CVE-2010-3677
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2010-3678)
CVE-2010-3678
-
Medium
MySQL Other Vulnerability (CVE-2010-3680)
CVE-2010-3680
-
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2010-3667)
CVE-2010-3667
CWE-20
Medium
MySQL Other Vulnerability (CVE-2010-3681)
CVE-2010-3681
-
Medium
MySQL Other Vulnerability (CVE-2010-3682)
CVE-2010-3682
-
Medium
MySQL Other Vulnerability (CVE-2010-3683)
CVE-2010-3683
-
Medium
Drupal Improper Authentication Vulnerability (CVE-2010-3685)
CVE-2010-3685
CWE-287
Medium
Drupal Improper Authentication Vulnerability (CVE-2010-3686)
CVE-2010-3686
CWE-287
Medium
PHP Improper Input Validation Vulnerability (CVE-2010-3709)
CVE-2010-3709
CWE-20
Medium
PHP Resource Management Errors Vulnerability (CVE-2010-3710)
CVE-2010-3710
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3712)
CVE-2010-3712
CWE-707
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3669)
CVE-2010-3669
CWE-601
Medium
TYPO3 Use of Insufficiently Random Values Vulnerability (CVE-2010-3666)
CVE-2010-3666
CWE-330
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-3063)
CVE-2010-3063
CWE-119
Medium
Ruby on Rails Missing Encryption of Sensitive Data Vulnerability (CVE-2010-3299)
CVE-2010-3299
CWE-311
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-3064)
CVE-2010-3064
CWE-119
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3065)
CVE-2010-3065
CWE-264
Medium
Squid Other Vulnerability (CVE-2010-3072)
CVE-2010-3072
-
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3082)
CVE-2010-3082
CWE-707
Medium
Drupal Improper Authentication Vulnerability (CVE-2010-3091)
CVE-2010-3091
CWE-287
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)
CVE-2010-3092
CWE-264
Medium
Zope Web Application Server Other Vulnerability (CVE-2010-3198)
CVE-2010-3198
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3263)
CVE-2010-3263
CWE-707
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3433)
CVE-2010-3433
CWE-264
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3665)
CVE-2010-3665
CWE-707
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3436)
CVE-2010-3436
CWE-264
Medium
Python Other Vulnerability (CVE-2010-3492)
CVE-2010-3492
-
Medium
Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3493)
CVE-2010-3493
CWE-362
Medium
Oracle Database Server CVE-2010-3590 Vulnerability (CVE-2010-3590)
CVE-2010-3590
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3659)
CVE-2010-3659
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3660)
CVE-2010-3660
CWE-707
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)
CVE-2010-3661
CWE-601
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3664)
CVE-2010-3664
CWE-200
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1915)
CVE-2010-1915
CWE-200
Medium
Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1899)
CVE-2010-1899
CWE-119
Medium
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4305)
CVE-2009-4305
CWE-138
Medium
OpenSSL Improper Input Validation Vulnerability (CVE-2010-0433)
CVE-2010-0433
CWE-20
Medium
Oracle Application Server CVE-2010-0066 Vulnerability (CVE-2010-0066)
CVE-2010-0066
-
Medium
Oracle Application Server CVE-2010-0067 Vulnerability (CVE-2010-0067)
CVE-2010-0067
-
Medium
Oracle Application Server CVE-2010-0070 Vulnerability (CVE-2010-0070)
CVE-2010-0070
-
Medium
TYPO3 CVE-2010-0286 Vulnerability (CVE-2010-0286)
CVE-2010-0286
-
Medium
Lighttpd Resource Management Errors Vulnerability (CVE-2010-0295)
CVE-2010-0295
-
Medium
Squid Improper Input Validation Vulnerability (CVE-2010-0308)
CVE-2010-0308
CWE-20
Medium
PHP Other Vulnerability (CVE-2010-0397)
CVE-2010-0397
-
Medium
Apache HTTP Server Other Vulnerability (CVE-2010-0408)
CVE-2010-0408
-
Medium
Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0434)
CVE-2010-0434
CWE-200
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-5145)
CVE-2009-5145
CWE-707
Medium
PostgreSQL Numeric Errors Vulnerability (CVE-2010-0442)
CVE-2010-0442
-
Medium
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0464)
CVE-2010-0464
CWE-200
Medium
SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0465)
CVE-2010-0465
CWE-707
Medium
Squid Other Vulnerability (CVE-2010-0639)
CVE-2010-0639
-
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-0682)
CVE-2010-0682
CWE-264
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-0738)
CVE-2010-0738
CWE-264
Medium
OpenSSL Improper Input Validation Vulnerability (CVE-2010-0740)
CVE-2010-0740
CWE-20
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-0817)
CVE-2010-0817
CWE-707
Medium
Apache HTTP Server Numeric Errors Vulnerability (CVE-2010-0010)
CVE-2010-0010
-
Medium
Jetty Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-5046)
CVE-2009-5046
CWE-707
Medium
Oracle Database Server CVE-2010-0852 Vulnerability (CVE-2010-0852)
CVE-2010-0852
-
Medium
Cherokee Improper Input Validation Vulnerability (CVE-2009-4489)
CVE-2009-4489
CWE-20
Medium
ZenCart Improper Input Validation Vulnerability (CVE-2009-4321)
CVE-2009-4321
CWE-20
Medium
ZenCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4322)
CVE-2009-4322
CWE-200
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2009-4355)
CVE-2009-4355
-
Medium
Serendipity Other Vulnerability (CVE-2009-4412)
CVE-2009-4412
-
Medium
PHP Numeric Errors Vulnerability (CVE-2009-4418)
CVE-2009-4418
-
Medium
Internet Information Services CVE-2009-4444 Vulnerability (CVE-2009-4444)
CVE-2009-4444
-
Medium
Internet Information Services Improper Input Validation Vulnerability (CVE-2009-4445)
CVE-2009-4445
CWE-20
Medium
Nginx CVE-2009-4487 Vulnerability (CVE-2009-4487)
CVE-2009-4487
-
Medium
Ruby Improper Input Validation Vulnerability (CVE-2009-4492)
CVE-2009-4492
CWE-20
Medium
MySQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-5026)
CVE-2009-5026
CWE-138
Medium