🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15405 vulnerabilities
in this category.
Critical: 1674
High: 4167
Medium: 8767
Low: 793
Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6814)
CVE-2017-6814
CWE-707
Medium
OpenVPN AS Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2017-5868)
CVE-2017-5868
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5875)
CVE-2017-5875
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5876)
CVE-2017-5876
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5877)
CVE-2017-5877
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6003)
CVE-2017-6003
CWE-707
Medium
TYPO3 Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-6370)
CVE-2017-6370
CWE-319
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6446)
CVE-2017-6446
CWE-707
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6483)
CVE-2017-6483
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)
CVE-2017-6514
CWE-200
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5689)
CVE-2018-5689
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5692)
CVE-2018-5692
CWE-707
Medium
MySQL CVE-2017-10296 Vulnerability (CVE-2017-10296)
CVE-2017-10296
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3808)
CVE-2019-3808
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3402)
CVE-2019-3402
CWE-707
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-3403)
CVE-2019-3403
CWE-863
Medium
Django Improper Input Validation Vulnerability (CVE-2019-3498)
CVE-2019-3498
CWE-20
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3578)
CVE-2019-3578
CWE-707
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3579)
CVE-2019-3579
CWE-200
Medium
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3739)
CVE-2019-3739
CWE-203
Medium
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)
CVE-2019-3740
CWE-203
Medium
Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-3805)
CVE-2019-3805
CWE-362
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3810)
CVE-2019-3810
CWE-200
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3400)
CVE-2019-3400
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3848)
CVE-2019-3848
CWE-200
Medium
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-3850)
CVE-2019-3850
CWE-601
Medium
Moodle CVE-2019-3851 Vulnerability (CVE-2019-3851)
CVE-2019-3851
-
Medium
Moodle CVE-2019-3852 Vulnerability (CVE-2019-3852)
CVE-2019-3852
-
Medium
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3872)
CVE-2019-3872
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4083)
CVE-2019-4083
CWE-707
Medium
IBM RTC CVE-2019-4084 Vulnerability (CVE-2019-4084)
CVE-2019-4084
-
Medium
IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2019-4151)
CVE-2019-4151
CWE-326
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-3401)
CVE-2019-3401
CWE-863
Medium
MySQL CVE-2019-3018 Vulnerability (CVE-2019-3018)
CVE-2019-3018
-
Medium
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153)
CVE-2019-4153
CWE-601
Medium
Oracle JRE CVE-2019-2977 Vulnerability (CVE-2019-2977)
CVE-2019-2977
-
Medium
MySQL CVE-2019-2960 Vulnerability (CVE-2019-2960)
CVE-2019-2960
-
Medium
MySQL CVE-2019-2963 Vulnerability (CVE-2019-2963)
CVE-2019-2963
-
Medium
MySQL CVE-2019-2966 Vulnerability (CVE-2019-2966)
CVE-2019-2966
-
Medium
MySQL CVE-2019-2967 Vulnerability (CVE-2019-2967)
CVE-2019-2967
-
Medium
MySQL CVE-2019-2968 Vulnerability (CVE-2019-2968)
CVE-2019-2968
-
Medium
MySQL CVE-2019-2969 Vulnerability (CVE-2019-2969)
CVE-2019-2969
-
Medium
MySQL CVE-2019-2974 Vulnerability (CVE-2019-2974)
CVE-2019-2974
-
Medium
Oracle JRE CVE-2019-2975 Vulnerability (CVE-2019-2975)
CVE-2019-2975
-
Medium
MySQL CVE-2019-2982 Vulnerability (CVE-2019-2982)
CVE-2019-2982
-
Medium
MySQL CVE-2019-3011 Vulnerability (CVE-2019-3011)
CVE-2019-3011
-
Medium
Oracle JRE CVE-2019-2989 Vulnerability (CVE-2019-2989)
CVE-2019-2989
-
Medium
MySQL CVE-2019-2991 Vulnerability (CVE-2019-2991)
CVE-2019-2991
-
Medium
MySQL CVE-2019-2993 Vulnerability (CVE-2019-2993)
CVE-2019-2993
-
Medium
MySQL CVE-2019-2997 Vulnerability (CVE-2019-2997)
CVE-2019-2997
-
Medium
MySQL CVE-2019-2998 Vulnerability (CVE-2019-2998)
CVE-2019-2998
-
Medium
Oracle JRE CVE-2019-2999 Vulnerability (CVE-2019-2999)
CVE-2019-2999
-
Medium
MySQL CVE-2019-3003 Vulnerability (CVE-2019-3003)
CVE-2019-3003
-
Medium
MySQL CVE-2019-3004 Vulnerability (CVE-2019-3004)
CVE-2019-3004
-
Medium
MySQL CVE-2019-3009 Vulnerability (CVE-2019-3009)
CVE-2019-3009
-
Medium
IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152)
CVE-2019-4152
CWE-384
Medium
IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2019-4156)
CVE-2019-4156
CWE-327
Medium
MySQL CVE-2019-2957 Vulnerability (CVE-2019-2957)
CVE-2019-2957
-
Medium
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7864)
CVE-2019-7864
CWE-639
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7744)
CVE-2019-7744
CWE-707
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)
CVE-2019-7851
CWE-352
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7852)
CVE-2019-7852
CWE-200
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7853)
CVE-2019-7853
CWE-707
Medium
Magento Cryptographic Issues Vulnerability (CVE-2019-7855)
CVE-2019-7855
-
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7857)
CVE-2019-7857
CWE-352
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7862)
CVE-2019-7862
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7863)
CVE-2019-7863
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7866)
CVE-2019-7866
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7741)
CVE-2019-7741
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7867)
CVE-2019-7867
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7868)
CVE-2019-7868
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7869)
CVE-2019-7869
CWE-707
Medium
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)
CVE-2019-7872
CWE-639
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7873)
CVE-2019-7873
CWE-352
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7874)
CVE-2019-7874
CWE-352
Medium
«
1
...
171
172
173
...
206
»