🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15072 vulnerabilities
in this category.
Critical: 1617
High: 4043
Medium: 8626
Low: 784
Information: 2
Vulnerability Name
CVE
CWE
Severity
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9526)
CVE-2014-9526
CWE-707
Medium
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-7137)
CVE-2014-7137
CWE-138
Medium
TYPO3 Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-9508)
CVE-2014-9508
CWE-59
Medium
Squid Data Processing Errors Vulnerability (CVE-2014-7141)
CVE-2014-7141
-
Medium
Squid Improper Input Validation Vulnerability (CVE-2014-7142)
CVE-2014-7142
CWE-20
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9481)
CVE-2014-9481
CWE-200
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9480)
CVE-2014-9480
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9479)
CVE-2014-9479
CWE-707
Medium
Python Numeric Errors Vulnerability (CVE-2014-7185)
CVE-2014-7185
-
Medium
MySQL CVE-2014-6559 Vulnerability (CVE-2014-6559)
CVE-2014-6559
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0205)
CVE-2015-0205
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7199)
CVE-2014-7199
CWE-707
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0220)
CVE-2015-0220
CWE-707
Medium
MySQL CVE-2014-6505 Vulnerability (CVE-2014-6505)
CVE-2014-6505
-
Medium
OpenSSL DEPRECATED: Code Vulnerability (CVE-2015-0287)
CVE-2015-0287
-
Medium
OpenSSL DEPRECATED: Code Vulnerability (CVE-2015-0286)
CVE-2015-0286
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0285)
CVE-2015-0285
-
Medium
MySQL CVE-2014-6507 Vulnerability (CVE-2014-6507)
CVE-2014-6507
-
Medium
Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-0269)
CVE-2015-0269
CWE-22
Medium
Oracle Database Server CVE-2014-6514 Vulnerability (CVE-2014-6514)
CVE-2014-6514
-
Medium
MySQL CVE-2014-6520 Vulnerability (CVE-2014-6520)
CVE-2014-6520
-
Medium
Apache HTTP Server Other Vulnerability (CVE-2015-0253)
CVE-2015-0253
-
Medium
PHP Other Vulnerability (CVE-2015-0232)
CVE-2015-0232
-
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2015-0228)
CVE-2015-0228
CWE-20
Medium
Django DEPRECATED: Code Vulnerability (CVE-2015-0222)
CVE-2015-0222
-
Medium
MySQL CVE-2014-6530 Vulnerability (CVE-2014-6530)
CVE-2014-6530
-
Medium
Django Resource Management Errors Vulnerability (CVE-2015-0221)
CVE-2015-0221
-
Medium
Django DEPRECATED: Code Vulnerability (CVE-2015-0219)
CVE-2015-0219
-
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0206)
CVE-2015-0206
CWE-119
Medium
Oracle Database Server CVE-2014-6542 Vulnerability (CVE-2014-6542)
CVE-2014-6542
-
Medium
OpenSSL Other Vulnerability (CVE-2015-0207)
CVE-2015-0207
-
Medium
MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)
CVE-2014-6555
-
Medium
Oracle Database Server CVE-2014-6547 Vulnerability (CVE-2014-6547)
CVE-2014-6547
-
Medium
OpenSSL Other Vulnerability (CVE-2015-0208)
CVE-2015-0208
-
Medium
OpenSSL Other Vulnerability (CVE-2015-0209)
CVE-2015-0209
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)
CVE-2015-0211
CWE-200
Medium
Oracle Database Server CVE-2014-6541 Vulnerability (CVE-2014-6541)
CVE-2014-6541
-
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0218)
CVE-2015-0218
CWE-352
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0213)
CVE-2015-0213
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-0214)
CVE-2015-0214
CWE-264
Medium
Oracle Database Server CVE-2014-6538 Vulnerability (CVE-2014-6538)
CVE-2014-6538
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0215)
CVE-2015-0215
CWE-200
Medium
Oracle Database Server CVE-2014-6537 Vulnerability (CVE-2014-6537)
CVE-2014-6537
-
Medium
Moodle Resource Management Errors Vulnerability (CVE-2015-0217)
CVE-2015-0217
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9477)
CVE-2014-9477
CWE-707
Medium
Joomla CVE-2014-7229 Vulnerability (CVE-2014-7229)
CVE-2014-7229
-
Medium
MySQL CVE-2014-6495 Vulnerability (CVE-2014-6495)
CVE-2014-6495
-
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8793)
CVE-2014-8793
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9032)
CVE-2014-9032
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9031)
CVE-2014-9031
CWE-707
Medium
Drupal CVE-2014-9016 Vulnerability (CVE-2014-9016)
CVE-2014-9016
-
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)
CVE-2014-9015
CWE-264
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8992)
CVE-2014-8992
CWE-707
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7838)
CVE-2014-7838
CWE-352
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8961)
CVE-2014-8961
CWE-22
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7846)
CVE-2014-7846
CWE-264
Medium
Moodle Resource Management Errors Vulnerability (CVE-2014-7847)
CVE-2014-7847
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7848)
CVE-2014-7848
CWE-200
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7849)
CVE-2014-7849
CWE-264
Medium
phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8959)
CVE-2014-8959
CWE-22
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)
CVE-2014-8958
CWE-707
Medium
ReviveAdserver Other Vulnerability (CVE-2014-8875)
CVE-2014-8875
-
Medium
MODX Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-8775)
CVE-2014-8775
CWE-200
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033)
CVE-2014-9033
CWE-352
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)
CVE-2014-8774
CWE-707
Medium
MODX Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-8773)
CVE-2014-8773
CWE-352
Medium
YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8488)
CVE-2014-8488
CWE-707
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-8275)
CVE-2014-8275
-
Medium
MongoDb Improper Authentication Vulnerability (CVE-2014-8180)
CVE-2014-8180
CWE-287
Medium
PostgreSQL Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2014-8161)
CVE-2014-8161
CWE-209
Medium
Apache HTTP Server Incorrect Authorization Vulnerability (CVE-2014-8109)
CVE-2014-8109
CWE-863
Medium
OpenVPN AS Resource Management Errors Vulnerability (CVE-2014-8104)
CVE-2014-8104
-
Medium
Ruby Other Vulnerability (CVE-2014-8090)
CVE-2014-8090
-
Medium
Osclass Other Vulnerability (CVE-2014-8085)
CVE-2014-8085
-
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7853)
CVE-2014-7853
CWE-200
Medium
«
1
...
181
182
183
...
201
»