Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6035)
CVE-2016-6035
CWE-707
Medium
WebLogic CVE-2016-3416 Vulnerability (CVE-2016-3416)
CVE-2016-3416
-
Medium
MySQL CVE-2016-3501 Vulnerability (CVE-2016-3501)
CVE-2016-3501
-
Medium
Python Other Vulnerability (CVE-2016-3189)
CVE-2016-3189
-
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3170)
CVE-2016-3170
CWE-200
Medium
Drupal 7PK - Security Features Vulnerability (CVE-2016-3168)
CVE-2016-3168
-
Medium
Drupal Other Vulnerability (CVE-2016-3166)
CVE-2016-3166
-
Medium
WP Plugin Contact Form 7 Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2265)
CVE-2014-2265
CWE-264
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3018)
CVE-2016-3018
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3014)
CVE-2016-3014
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-2270)
CVE-2014-2270
CWE-119
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6037)
CVE-2016-6037
CWE-707
Medium
Sqlite Improper Input Validation Vulnerability (CVE-2016-6153)
CVE-2016-6153
CWE-20
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2987)
CVE-2016-2987
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2986)
CVE-2016-2986
CWE-707
Medium
MySQL CVE-2016-3495 Vulnerability (CVE-2016-3495)
CVE-2016-3495
-
Medium
MySQL CVE-2016-3518 Vulnerability (CVE-2016-3518)
CVE-2016-3518
-
Medium
Jenkins Improper Authentication Vulnerability (CVE-2014-2062)
CVE-2014-2062
CWE-287
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3724)
CVE-2016-3724
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5705)
CVE-2016-5705
CWE-707
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-4042)
CVE-2016-4042
CWE-200
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-2064)
CVE-2014-2064
CWE-200
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3971)
CVE-2016-3971
CWE-707
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-3733)
CVE-2016-3733
CWE-284
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3732)
CVE-2016-3732
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3731)
CVE-2016-3731
CWE-200
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-3729)
CVE-2016-3729
CWE-284
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3727)
CVE-2016-3727
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5730)
CVE-2016-5730
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5731)
CVE-2016-5731
CWE-707
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3725)
CVE-2016-3725
CWE-264
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3723)
CVE-2016-3723
CWE-200
Medium
MySQL CVE-2016-3521 Vulnerability (CVE-2016-3521)
CVE-2016-3521
-
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2065)
CVE-2014-2065
CWE-707
Medium
Jenkins Improper Authentication Vulnerability (CVE-2014-2066)
CVE-2014-2066
CWE-287
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5732)
CVE-2016-5732
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5733)
CVE-2016-5733
CWE-707
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3722)
CVE-2016-3722
CWE-264
Medium
Jenkins DEPRECATED: Code Vulnerability (CVE-2016-3721)
CVE-2016-3721
-
Medium
Dot CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3688)
CVE-2016-3688
CWE-200
Medium
MySQL CVE-2016-3615 Vulnerability (CVE-2016-3615)
CVE-2016-3615
-
Medium
MySQL CVE-2016-3614 Vulnerability (CVE-2016-3614)
CVE-2016-3614
-
Medium
GlassFish CVE-2016-3608 Vulnerability (CVE-2016-3608)
CVE-2016-3608
-
Medium
MySQL CVE-2016-3588 Vulnerability (CVE-2016-3588)
CVE-2016-3588
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5833)
CVE-2016-5833
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2080)
CVE-2014-2080
CWE-707
Medium
Piwigo Improper Access Control Vulnerability (CVE-2016-10514)
CVE-2016-10514
CWE-284
Medium
Bootstrap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10735)
CVE-2016-10735
CWE-707
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10513)
CVE-2016-10513
CWE-707
Medium
Moodle Improper Authentication Vulnerability (CVE-2014-3552)
CVE-2014-3552
CWE-287
Medium
MySQL CVE-2016-0505 Vulnerability (CVE-2016-0505)
CVE-2016-0505
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3549)
CVE-2014-3549
CWE-707
Medium
MySQL CVE-2016-0504 Vulnerability (CVE-2016-0504)
CVE-2016-0504
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3550)
CVE-2014-3550
CWE-707
Medium
MySQL CVE-2016-8318 Vulnerability (CVE-2016-8318)
CVE-2016-8318
-
Medium
MySQL CVE-2016-0503 Vulnerability (CVE-2016-0503)
CVE-2016-0503
-
Medium
MySQL CVE-2016-8327 Vulnerability (CVE-2016-8327)
CVE-2016-8327
-
Medium
MySQL CVE-2016-0502 Vulnerability (CVE-2016-0502)
CVE-2016-0502
-
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-8612)
CVE-2016-8612
CWE-20
Medium
Oracle Database Server CVE-2016-0472 Vulnerability (CVE-2016-0472)
CVE-2016-0472
-
Medium
Oracle Database Server CVE-2016-0467 Vulnerability (CVE-2016-0467)
CVE-2016-0467
-
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8627)
CVE-2016-8627
CWE-400
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-8642)
CVE-2016-8642
CWE-284
Medium
MySQL CVE-2016-0595 Vulnerability (CVE-2016-0595)
CVE-2016-0595
-
Medium
Oracle Database Server CVE-2016-0461 Vulnerability (CVE-2016-0461)
CVE-2016-0461
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0331)
CVE-2016-0331
CWE-707
Medium
IBM RTC Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-0325)
CVE-2016-0325
CWE-138
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0285)
CVE-2016-0285
CWE-707
Medium
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0284)
CVE-2016-0284
CWE-611
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0273)
CVE-2016-0273
CWE-707
Medium
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0219)
CVE-2016-0219
CWE-611
Medium
Chamilo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-9540)
CVE-2015-9540
CWE-601
Medium
jQuery PrettyPhoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-9478)
CVE-2015-9478
CWE-707
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-9304)
CVE-2015-9304
CWE-707
Medium
MySQL CVE-2014-0401 Vulnerability (CVE-2014-0401)
CVE-2014-0401
-
Medium