Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
CData Jetty Path Traversal (CVE-2024-31848/CVE-2024-31849/CVE-2024-31850/CVE-2024-31851)
CVE-2024-31851
CWE-22
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60696)
CVE-2026-60696
CWE-306
Critical
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19212)
CVE-2019-19212
CWE-707
Critical
Oracle JRE CVE-2013-5824 Vulnerability (CVE-2013-5824)
CVE-2013-5824
-
Critical
Oracle HTTP Server Improper Access Control Vulnerability (CVE-2026-60438)
CVE-2026-60438
CWE-284
Critical
Sqlite Incorrect Conversion between Numeric Types Vulnerability (CVE-2019-19317)
CVE-2019-19317
CWE-681
Critical
PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19594)
CVE-2019-19594
CWE-434
Critical
Apache HTTP Server Improper Handling of Case Sensitivity Vulnerability (CVE-2001-0766)
CVE-2001-0766
CWE-178
Critical
PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19595)
CVE-2019-19595
CWE-434
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60672)
CVE-2026-60672
CWE-306
Critical
Oracle JRE CVE-2013-5817 Vulnerability (CVE-2013-5817)
CVE-2013-5817
-
Critical
phpMyAdmin CVE-2019-19617 Vulnerability (CVE-2019-19617)
CVE-2019-19617
-
Critical
Sqlite Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-19646)
CVE-2019-19646
CWE-754
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60698)
CVE-2026-60698
CWE-306
Critical
Oracle HTTP Server Improper Access Control Vulnerability (CVE-2026-60364)
CVE-2026-60364
CWE-284
Critical
Oracle JRE CVE-2013-5814 Vulnerability (CVE-2013-5814)
CVE-2013-5814
-
Critical
WebLogic Improper Access Control Vulnerability (CVE-2026-60702)
CVE-2026-60702
CWE-284
Critical
WebLogic CVE-2026-60977 Vulnerability (CVE-2026-60977)
CVE-2026-60977
-
Critical
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-61211)
CVE-2026-61211
CWE-284
Critical
Oracle JRE CVE-2013-5810 Vulnerability (CVE-2013-5810)
CVE-2013-5810
-
Critical
Django Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-19844)
CVE-2019-19844
CWE-640
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-19846)
CVE-2019-19846
CWE-138
Critical
Oracle JRE CVE-2013-5809 Vulnerability (CVE-2013-5809)
CVE-2013-5809
-
Critical
Oracle JRE CVE-2013-5806 Vulnerability (CVE-2013-5806)
CVE-2013-5806
-
Critical
Oracle JRE CVE-2013-5805 Vulnerability (CVE-2013-5805)
CVE-2013-5805
-
Critical
Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-19919)
CVE-2019-19919
CWE-138
Critical
Oracle HTTP Server Missing Authentication for Critical Function Vulnerability (CVE-2026-60365)
CVE-2026-60365
CWE-306
Critical
Oracle HTTP Server Improper Access Control Vulnerability (CVE-2026-60363)
CVE-2026-60363
CWE-284
Critical
Roundcube Authentication Bypass by Spoofing Vulnerability (CVE-2026-62644)
CVE-2026-62644
CWE-290
Critical
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2026-60208)
CVE-2026-60208
CWE-400
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17571)
CVE-2019-17571
CWE-502
Critical
Oracle JRE CVE-2013-5842 Vulnerability (CVE-2013-5842)
CVE-2013-5842
-
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60204)
CVE-2026-60204
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60205)
CVE-2026-60205
CWE-306
Critical
Oracle JRE CVE-2013-5838 Vulnerability (CVE-2013-5838)
CVE-2013-5838
-
Critical
WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-17669)
CVE-2019-17669
CWE-918
Critical
WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-17670)
CVE-2019-17670
CWE-918
Critical
Oracle JRE CVE-2012-1531 Vulnerability (CVE-2012-1531)
CVE-2012-1531
-
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60206)
CVE-2026-60206
CWE-306
Critical
Oracle JRE CVE-2012-1532 Vulnerability (CVE-2012-1532)
CVE-2012-1532
-
Critical
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-18622)
CVE-2019-18622
CWE-138
Critical
Oracle JRE CVE-2012-1533 Vulnerability (CVE-2012-1533)
CVE-2012-1533
-
Critical
Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935)
CVE-2019-18935
CWE-502
Critical
Oracle JRE CVE-2012-1541 Vulnerability (CVE-2012-1541)
CVE-2012-1541
-
Critical
Oracle JRE CVE-2013-5832 Vulnerability (CVE-2013-5832)
CVE-2013-5832
-
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60291)
CVE-2026-60291
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60292)
CVE-2026-60292
CWE-306
Critical
Oracle HTTP Server Improper Input Validation Vulnerability (CVE-2020-29508)
CVE-2020-29508
CWE-20
Critical
Oracle HTTP Server Improper Input Validation Vulnerability (CVE-2020-29507)
CVE-2020-29507
CWE-20
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60294)
CVE-2026-60294
CWE-306
Critical
Oracle HTTP Server Other Vulnerability (CVE-2020-29506)
CVE-2020-29506
-
Critical
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)
CVE-2019-18801
CWE-787
Critical
Envoy Proxy CVE-2019-18802 Vulnerability (CVE-2019-18802)
CVE-2019-18802
-
Critical
Oracle JRE CVE-2013-5830 Vulnerability (CVE-2013-5830)
CVE-2013-5830
-
Critical
Oracle JRE CVE-2013-5829 Vulnerability (CVE-2013-5829)
CVE-2013-5829
-
Critical
Roundcube Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-62643)
CVE-2026-62643
CWE-918
Critical
phpMyFAQ Improper Access Control Vulnerability (CVE-2023-2429)
CVE-2023-2429
CWE-284
Critical
Apache HTTP Server Other Vulnerability (CVE-1999-0926)
CVE-1999-0926
-
Critical
Zope Web Application Server Other Vulnerability (CVE-2000-0062)
CVE-2000-0062
-
Critical
Python CVE-2020-27619 Vulnerability (CVE-2020-27619)
CVE-2020-27619
-
Critical
CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)
CVE-2023-31541
CWE-434
Critical
PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-31672)
CVE-2023-31672
CWE-138
Critical
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20444)
CVE-2019-20444
CWE-444
Critical
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20445)
CVE-2019-20445
CWE-444
Critical
Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)
CVE-2019-20800
CWE-787
Critical
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-26935)
CVE-2020-26935
CWE-138
Critical
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-32071)
CVE-2023-32071
CWE-707
Critical
Pega Infinity Improper Authentication Vulnerability (CVE-2023-32090)
CVE-2023-32090
CWE-287
Critical
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25019)
CVE-2019-25019
CWE-138
Critical
Artifactory Improper Authentication Vulnerability (CVE-2026-66014)
CVE-2026-66014
CWE-287
Critical
PHP Other Vulnerability (CVE-2000-0059)
CVE-2000-0059
-
Critical
Grafana Signature Verification Vulnerability (CVE-2020-27846)
CVE-2020-27846
-
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25710)
CVE-2019-25710
CWE-138
Critical
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33361)
CVE-2023-33361
CWE-138
Critical
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33362)
CVE-2023-33362
CWE-138
Critical