Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2332)
CVE-2015-2332
CWE-707
Medium
PHP Out-of-bounds Read Vulnerability (CVE-2015-2326)
CVE-2015-2326
CWE-125
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2317)
CVE-2015-2317
CWE-707
Medium
MySQL CVE-2015-4752 Vulnerability (CVE-2015-4752)
CVE-2015-4752
-
Medium
Django Resource Management Errors Vulnerability (CVE-2015-2316)
CVE-2015-2316
-
Medium
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-2305)
CVE-2015-2305
CWE-190
Medium
Oracle Database Server CVE-2015-4755 Vulnerability (CVE-2015-4755)
CVE-2015-4755
-
Medium
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5318)
CVE-2015-5318
CWE-352
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6727)
CVE-2015-6727
CWE-200
Medium
Moodle Resource Management Errors Vulnerability (CVE-2015-5332)
CVE-2015-5332
-
Medium
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5288)
CVE-2015-5288
CWE-200
Medium
Zenphoto Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5595)
CVE-2015-5595
CWE-352
Medium
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-3902)
CVE-2015-3902
CWE-352
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5397)
CVE-2015-5397
CWE-352
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5592)
CVE-2015-5592
CWE-707
Medium
Drupal Other Vulnerability (CVE-2015-3233)
CVE-2015-3233
-
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5593)
CVE-2015-5593
CWE-707
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5594)
CVE-2015-5594
CWE-707
Medium
Drupal Other Vulnerability (CVE-2015-3232)
CVE-2015-3232
-
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3231)
CVE-2015-3231
CWE-200
Medium
Ruby on Rails CVE-2015-3227 Vulnerability (CVE-2015-3227)
CVE-2015-3227
-
Medium
Drupal Improper Input Validation Vulnerability (CVE-2015-3234)
CVE-2015-3234
CWE-20
Medium
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-5608)
CVE-2015-5608
CWE-601
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3226)
CVE-2015-3226
CWE-707
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3216)
CVE-2015-3216
CWE-362
Medium
phpMyAdmin Cryptographic Issues Vulnerability (CVE-2015-3903)
CVE-2015-3903
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-3197)
CVE-2015-3197
-
Medium
WordPress Improper Access Control Vulnerability (CVE-2015-5623)
CVE-2015-5623
CWE-284
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3196)
CVE-2015-3196
CWE-362
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5651)
CVE-2015-5651
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5714)
CVE-2015-5714
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5339)
CVE-2015-5339
CWE-200
Medium
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5382)
CVE-2015-5382
CWE-200
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3195)
CVE-2015-3195
CWE-200
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3438)
CVE-2015-3438
CWE-707
Medium
phpBB URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-3880)
CVE-2015-3880
CWE-601
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5340)
CVE-2015-5340
CWE-200
Medium
qdPM Sensitive Information Disclosure Vulnerability (CVE-2015-3882)
CVE-2015-3882
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5341)
CVE-2015-5341
CWE-264
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3440)
CVE-2015-3440
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3439)
CVE-2015-3439
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5342)
CVE-2015-5342
CWE-264
Medium
qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities (CVE-2015-3883)
CVE-2015-3883
-
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5345)
CVE-2015-5345
CWE-22
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3412)
CVE-2015-3412
CWE-200
Medium
RubyGems 7PK - Security Features Vulnerability (CVE-2015-3900)
CVE-2015-3900
-
Medium
Ruby 7PK - Security Features Vulnerability (CVE-2015-3900)
CVE-2015-3900
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2015-3411)
CVE-2015-3411
CWE-20
Medium
PHP Improper Input Validation Vulnerability (CVE-2015-3330)
CVE-2015-3330
CWE-20
Medium
markdown-it Improper Access Control Vulnerability (CVE-2015-3295)
CVE-2015-3295
CWE-284
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3275)
CVE-2015-3275
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3274)
CVE-2015-3274
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5381)
CVE-2015-5381
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3273)
CVE-2015-3273
CWE-264
Medium
GlassFish Improper Input Validation Vulnerability (CVE-2015-3237)
CVE-2015-3237
CWE-20
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5715)
CVE-2015-5715
CWE-264
Medium
Coppermine Open Redirection Vulnerability (CVE-2015-3922)
CVE-2015-3922
-
Medium
Oracle Database Server CVE-2015-4923 Vulnerability (CVE-2015-4923)
CVE-2015-4923
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2015-4148)
CVE-2015-4148
CWE-20
Medium
Sqlite Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-6607)
CVE-2015-6607
CWE-264
Medium
PHP Resource Management Errors Vulnerability (CVE-2015-4024)
CVE-2015-4024
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6658)
CVE-2015-6658
CWE-707
Medium
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-6660)
CVE-2015-6660
CWE-352
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3176)
CVE-2015-3176
CWE-200
Medium
Moodle Other Vulnerability (CVE-2015-3175)
CVE-2015-3175
-
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6661)
CVE-2015-6661
CWE-200
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6665)
CVE-2015-6665
CWE-707
Medium
PostgreSQL Other Vulnerability (CVE-2015-3165)
CVE-2015-3165
-
Medium
ownCloud Other Vulnerability (CVE-2015-6670)
CVE-2015-6670
-
Medium
datatables Cross-site Scripting (XSS) Vulnerability (CVE-2015-6584)
CVE-2015-6584
-
Medium
MySQL Improper Access Control Vulnerability (CVE-2015-3152)
CVE-2015-3152
CWE-284
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-4552)
CVE-2015-4552
CWE-707
Medium
PHP Improper Certificate Validation Vulnerability (CVE-2015-3152)
CVE-2015-3152
CWE-295
Medium
ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2015-3013)
CVE-2015-3013
CWE-138
Medium
osCommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2965)
CVE-2015-2965
CWE-22
Medium