Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
MediaWiki CVE-2023-22909 Vulnerability (CVE-2023-22909)
CVE-2023-22909
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22910)
CVE-2023-22910
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22911)
CVE-2023-22911
CWE-707
Medium
MediaWiki Use of Insufficiently Random Values Vulnerability (CVE-2023-22912)
CVE-2023-22912
CWE-330
Medium
MediaWiki Incorrect Authorization Vulnerability (CVE-2023-22945)
CVE-2023-22945
CWE-863
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-23750)
CVE-2023-23750
CWE-352
Medium
Joomla Incorrect Authorization Vulnerability (CVE-2023-23751)
CVE-2023-23751
CWE-863
Medium
Joomla Other Vulnerability (CVE-2023-23752)
CVE-2023-23752
-
Medium
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-23754)
CVE-2023-23754
CWE-601
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23921)
CVE-2023-23921
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23922)
CVE-2023-23922
CWE-707
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23927)
CVE-2023-23927
CWE-707
Medium
ownCloud Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-23948)
CVE-2023-23948
CWE-138
Medium
PleskLin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-24044)
CVE-2023-24044
CWE-601
Medium
PleskWin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-24044)
CVE-2023-24044
CWE-601
Medium
ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-24804)
CVE-2023-24804
CWE-22
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-24814)
CVE-2023-24814
CWE-707
Medium
SharePoint CVE-2023-24950 Vulnerability (CVE-2023-24950)
CVE-2023-24950
-
Medium
SharePoint CVE-2023-24954 Vulnerability (CVE-2023-24954)
CVE-2023-24954
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-25727)
CVE-2023-25727
CWE-707
Medium
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-26048)
CVE-2023-26048
CWE-770
Medium
Jetty CVE-2023-26049 Vulnerability (CVE-2023-26049)
CVE-2023-26049
-
Medium
XWiki Incorrect Authorization Vulnerability (CVE-2023-26056)
CVE-2023-26056
CWE-863
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116)
CVE-2023-26116
CWE-1333
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26117)
CVE-2023-26117
CWE-1333
Medium
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26118)
CVE-2023-26118
CWE-1333
Medium
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-26465)
CVE-2023-26465
CWE-707
Medium
XWiki CVE-2023-26473 Vulnerability (CVE-2023-26473)
CVE-2023-26473
-
Medium
XWiki Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-26479)
CVE-2023-26479
CWE-755
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-26480)
CVE-2023-26480
CWE-707
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27008)
CVE-2023-27008
CWE-707
Medium
Python Improper Input Validation Vulnerability (CVE-2023-27043)
CVE-2023-27043
CWE-20
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27148)
CVE-2023-27148
CWE-707
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27149)
CVE-2023-27149
CWE-707
Medium
Envoy Proxy Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27492)
CVE-2023-27492
CWE-770
Medium
phpList CVE-2023-27576 Vulnerability (CVE-2023-27576)
CVE-2023-27576
-
Medium
easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27739)
CVE-2023-27739
CWE-707
Medium
Jenkins CVE-2023-27902 Vulnerability (CVE-2023-27902)
CVE-2023-27902
-
Medium
Jenkins Incorrect Authorization Vulnerability (CVE-2023-27903)
CVE-2023-27903
CWE-863
Medium
Jenkins CVE-2023-27904 Vulnerability (CVE-2023-27904)
CVE-2023-27904
-
Medium
Moodle CVE-2023-28330 Vulnerability (CVE-2023-28330)
CVE-2023-28330
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28331)
CVE-2023-28331
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28332)
CVE-2023-28332
CWE-707
Medium
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-28334)
CVE-2023-28334
CWE-639
Medium
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-28336)
CVE-2023-28336
CWE-668
Medium
Tornado URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-28370)
CVE-2023-28370
CWE-601
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28439)
CVE-2023-28439
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28467)
CVE-2023-28467
CWE-707
Medium
Apache Tomcat Unprotected Transport of Credentials Vulnerability (CVE-2023-28708)
CVE-2023-28708
CWE-523
Medium
MediaWiki CVE-2023-29137 Vulnerability (CVE-2023-29137)
CVE-2023-29137
-
Medium
MediaWiki CVE-2023-29139 Vulnerability (CVE-2023-29139)
CVE-2023-29139
-
Medium
MediaWiki CVE-2023-29140 Vulnerability (CVE-2023-29140)
CVE-2023-29140
-
Medium
Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-29200)
CVE-2023-29200
CWE-22
Medium
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29203)
CVE-2023-29203
CWE-668
Medium
XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-29204)
CVE-2023-29204
CWE-601
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29205)
CVE-2023-29205
CWE-707
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29206)
CVE-2023-29206
CWE-707
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29506)
CVE-2023-29506
CWE-707
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29508)
CVE-2023-29508
CWE-707
Medium
XWiki Improper Access Control Vulnerability (CVE-2023-29513)
CVE-2023-29513
CWE-284
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29515)
CVE-2023-29515
CWE-707
Medium
XWiki Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-29520)
CVE-2023-29520
CWE-755
Medium
Grafana Missing Authorization Vulnerability (CVE-2023-2183)
CVE-2023-2183
CWE-862
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2427)
CVE-2023-2427
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2428)
CVE-2023-2428
CWE-707
Medium
PostgreSQL CVE-2023-2455 Vulnerability (CVE-2023-2455)
CVE-2023-2455
-
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2550)
CVE-2023-2550
CWE-707
Medium
OpenSSL Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-2650)
CVE-2023-2650
CWE-770
Medium
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-2745)
CVE-2023-2745
CWE-22
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2752)
CVE-2023-2752
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2753)
CVE-2023-2753
CWE-707
Medium
Grafana Improper Synchronization Vulnerability (CVE-2023-2801)
CVE-2023-2801
CWE-662
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2817)
CVE-2023-2817
CWE-707
Medium
OpenSSL Improper Authentication Vulnerability (CVE-2023-2975)
CVE-2023-2975
CWE-287
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2998)
CVE-2023-2998
CWE-707
Medium