Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8390)
CVE-2019-8390
CWE-707
Medium
Internet Information Services Improper Input Validation Vulnerability (CVE-2009-4445)
CVE-2009-4445
CWE-20
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8450)
CVE-2019-8450
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8444)
CVE-2019-8444
CWE-707
Medium
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-8445)
CVE-2019-8445
CWE-862
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2019-8446)
CVE-2019-8446
CWE-863
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8447)
CVE-2019-8447
CWE-352
Medium
Atlassian Jira CVE-2019-8448 Vulnerability (CVE-2019-8448)
CVE-2019-8448
-
Medium
Atlassian Jira Missing Authentication for Critical Function Vulnerability (CVE-2019-8449)
CVE-2019-8449
CWE-306
Medium
Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
CVE-2019-9516
CWE-770
Medium
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
CVE-2019-9516
CWE-770
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0925)
CVE-2020-0925
CWE-707
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2009-3830)
CVE-2009-3830
CWE-20
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3946)
CVE-2009-3946
CWE-200
Medium
Joomla CVE-2009-3945 Vulnerability (CVE-2009-3945)
CVE-2009-3945
-
Medium
Python Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2019-9947)
CVE-2019-9947
CWE-707
Medium
Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-3898)
CVE-2009-3898
CWE-22
Medium
Nginx Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-3896)
CVE-2009-3896
CWE-119
Medium
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-3890)
CVE-2009-3890
CWE-94
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0891)
CVE-2020-0891
CWE-707
Medium
MySQL Other Vulnerability (CVE-2009-4019)
CVE-2009-4019
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3742)
CVE-2009-3742
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0893)
CVE-2020-0893
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0894)
CVE-2020-0894
CWE-707
Medium
Apache HTTP Server CVE-2009-3720 Vulnerability (CVE-2009-3720)
CVE-2009-3720
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0923)
CVE-2020-0923
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0924)
CVE-2020-0924
CWE-707
Medium
PHP Other Vulnerability (CVE-2009-4017)
CVE-2009-4017
-
Medium
Python Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2019-9740)
CVE-2019-9740
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4214)
CVE-2009-4214
CWE-707
Medium
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4076)
CVE-2009-4076
CWE-352
Medium
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4142)
CVE-2009-4142
CWE-707
Medium
PostgreSQL Other Vulnerability (CVE-2009-4136)
CVE-2009-4136
-
Medium
Python Out-of-bounds Write Vulnerability (CVE-2009-4134)
CVE-2009-4134
CWE-787
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9554)
CVE-2019-9554
CWE-707
Medium
e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4083)
CVE-2009-4083
CWE-707
Medium
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4077)
CVE-2009-4077
CWE-352
Medium
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4066)
CVE-2009-4066
CWE-352
Medium
MySQL Improper Input Validation Vulnerability (CVE-2009-4028)
CVE-2009-4028
CWE-20
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4040)
CVE-2009-4040
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4039)
CVE-2009-4039
CWE-707
Medium
PostgreSQL Cryptographic Issues Vulnerability (CVE-2009-4034)
CVE-2009-4034
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9711)
CVE-2019-9711
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9712)
CVE-2019-9712
CWE-707
Medium
MySQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2009-4030)
CVE-2009-4030
CWE-59
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9714)
CVE-2019-9714
CWE-707
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12308)
CVE-2019-12308
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7938)
CVE-2019-7938
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-10890)
CVE-2018-10890
CWE-200
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13387)
CVE-2018-13387
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-12711)
CVE-2018-12711
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4282)
CVE-2011-4282
CWE-707
Medium
MySQL CVE-2018-2769 Vulnerability (CVE-2018-2769)
CVE-2018-2769
-
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4281)
CVE-2011-4281
CWE-352
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4280)
CVE-2011-4280
CWE-707
Medium
MySQL CVE-2018-2766 Vulnerability (CVE-2018-2766)
CVE-2018-2766
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4279)
CVE-2011-4279
CWE-200
Medium
MySQL CVE-2018-2762 Vulnerability (CVE-2018-2762)
CVE-2018-2762
-
Medium
MySQL CVE-2018-2761 Vulnerability (CVE-2018-2761)
CVE-2018-2761
-
Medium
Oracle HTTP Server CVE-2018-2760 Vulnerability (CVE-2018-2760)
CVE-2018-2760
-
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13136)
CVE-2018-13136
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-13258)
CVE-2018-13258
CWE-200
Medium
MySQL CVE-2018-2759 Vulnerability (CVE-2018-2759)
CVE-2018-2759
-
Medium
MySQL CVE-2018-2773 Vulnerability (CVE-2018-2773)
CVE-2018-2773
-
Medium
MySQL CVE-2018-2758 Vulnerability (CVE-2018-2758)
CVE-2018-2758
-
Medium
Atlassian Confluence Improper Input Validation Vulnerability (CVE-2018-13389)
CVE-2018-13389
CWE-20
Medium
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-13391)
CVE-2018-13391
CWE-200
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13395)
CVE-2018-13395
CWE-707
Medium
PHP Cryptographic Issues Vulnerability (CVE-2011-2483)
CVE-2011-2483
-
Medium
Atlassian Jira Improper Privilege Management Vulnerability (CVE-2018-13400)
CVE-2018-13400
CWE-269
Medium
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13401)
CVE-2018-13401
CWE-601
Medium
MySQL CVE-2018-2703 Vulnerability (CVE-2018-2703)
CVE-2018-2703
-
Medium
Jboss EAP Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2011-2487)
CVE-2011-2487
CWE-327
Medium
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13402)
CVE-2018-13402
CWE-601
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2488)
CVE-2011-2488
CWE-200
Medium