Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)
CVE-2016-2559
CWE-707
Medium
Lighttpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2324)
CVE-2014-2324
CWE-22
Medium
CubeCart Improper Authentication Vulnerability (CVE-2014-2341)
CVE-2014-2341
CWE-287
Medium
Squid Improper Input Validation Vulnerability (CVE-2016-2390)
CVE-2016-2390
CWE-20
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)
CVE-2016-2212
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2190)
CVE-2016-2190
CWE-264
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1754)
CVE-2014-1754
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-1686)
CVE-2014-1686
CWE-200
Medium
MediaWiki Resource Management Errors Vulnerability (CVE-2015-8002)
CVE-2015-8002
-
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6311)
CVE-2016-6311
CWE-200
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)
CVE-2016-2178
CWE-200
Medium
Oracle JRE CVE-2014-2401 Vulnerability (CVE-2014-2401)
CVE-2014-2401
-
Medium
Oracle JRE CVE-2014-2403 Vulnerability (CVE-2014-2403)
CVE-2014-2403
-
Medium
MySQL CVE-2014-2434 Vulnerability (CVE-2014-2434)
CVE-2014-2434
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1607)
CVE-2014-1607
CWE-707
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6186)
CVE-2016-6186
CWE-707
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10872)
CVE-2016-10872
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0814)
CVE-2014-0814
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2572)
CVE-2014-2572
CWE-264
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2039)
CVE-2016-2039
CWE-200
Medium
ownCloud Improper Input Validation Vulnerability (CVE-2014-2585)
CVE-2014-2585
CWE-20
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2038)
CVE-2016-2038
CWE-200
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1912)
CVE-2016-1912
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1564)
CVE-2016-1564
CWE-707
Medium
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0813)
CVE-2014-0813
CWE-352
Medium
MediaWiki Improper Authentication Vulnerability (CVE-2014-2665)
CVE-2014-2665
CWE-287
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-1546)
CVE-2016-1546
-
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1501)
CVE-2016-1501
CWE-200
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1498)
CVE-2016-1498
CWE-707
Medium
Select2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10744)
CVE-2016-10744
CWE-707
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-100024)
CVE-2014-100024
CWE-707
Medium
PostgreSQL Numeric Errors Vulnerability (CVE-2014-2669)
CVE-2014-2669
-
Medium
Ruby Resource Management Errors Vulnerability (CVE-2014-2734)
CVE-2014-2734
-
Medium
Apache Tomcat CVE-2016-6794 Vulnerability (CVE-2016-6794)
CVE-2016-6794
-
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10737)
CVE-2016-10737
CWE-707
Medium
MySQL CVE-2016-5629 Vulnerability (CVE-2016-5629)
CVE-2016-5629
-
Medium
Django Improper Authentication Vulnerability (CVE-2014-0482)
CVE-2014-0482
CWE-287
Medium
Django Resource Management Errors Vulnerability (CVE-2014-0481)
CVE-2014-0481
-
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6897)
CVE-2016-6897
CWE-352
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10704)
CVE-2016-10704
CWE-707
Medium
Backbone.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10537)
CVE-2016-10537
CWE-707
Medium
Werkzeug WSGI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10516)
CVE-2016-10516
CWE-707
Medium
Django Improper Input Validation Vulnerability (CVE-2014-0480)
CVE-2014-0480
CWE-20
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-2497)
CVE-2014-2497
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6634)
CVE-2016-6634
CWE-707
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-2097)
CVE-2016-2097
CWE-22
Medium
MySQL CVE-2014-2442 Vulnerability (CVE-2014-2442)
CVE-2014-2442
-
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-1476)
CVE-2014-1476
CWE-264
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-6623)
CVE-2016-6623
CWE-20
Medium
MySQL CVE-2014-2435 Vulnerability (CVE-2014-2435)
CVE-2014-2435
-
Medium
MySQL CVE-2014-2436 Vulnerability (CVE-2014-2436)
CVE-2014-2436
-
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6624)
CVE-2016-6624
-
Medium
Django Improper Access Control Vulnerability (CVE-2016-2048)
CVE-2016-2048
CWE-284
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6625)
CVE-2016-6625
CWE-200
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6626)
CVE-2016-6626
-
Medium
MySQL 7PK - Security Features Vulnerability (CVE-2016-2047)
CVE-2016-2047
-
Medium
Django CVE-2014-1418 Vulnerability (CVE-2014-1418)
CVE-2014-1418
-
Medium
easyXDM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1403)
CVE-2014-1403
CWE-707
Medium
MySQL CVE-2014-2440 Vulnerability (CVE-2014-2440)
CVE-2014-2440
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6627)
CVE-2016-6627
CWE-200
Medium
MySQL CVE-2014-2494 Vulnerability (CVE-2014-2494)
CVE-2014-2494
-
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6628)
CVE-2016-6628
-
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-6630)
CVE-2016-6630
CWE-20
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2045)
CVE-2016-2045
CWE-707
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2044)
CVE-2016-2044
CWE-200
Medium
MySQL CVE-2014-2444 Vulnerability (CVE-2014-2444)
CVE-2014-2444
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2043)
CVE-2016-2043
CWE-707
Medium
phpMyAdmin Resource Management Errors Vulnerability (CVE-2016-6632)
CVE-2016-6632
-
Medium
MySQL CVE-2014-2450 Vulnerability (CVE-2014-2450)
CVE-2014-2450
-
Medium
FluxBB Other Vulnerability (CVE-2014-10030)
CVE-2014-10030
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2042)
CVE-2016-2042
CWE-200
Medium
Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-10022)
CVE-2014-10022
CWE-119
Medium
MySQL CVE-2014-2484 Vulnerability (CVE-2014-2484)
CVE-2014-2484
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2040)
CVE-2016-2040
CWE-707
Medium
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-6207)
CVE-2016-6207
CWE-190
Medium