Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3273)
CVE-2015-3273
CWE-264
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2949)
CVE-2015-2949
CWE-707
Medium
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3923)
CVE-2015-3923
CWE-200
Medium
qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities (CVE-2015-3883)
CVE-2015-3883
-
Medium
Ruby 7PK - Security Features Vulnerability (CVE-2015-3900)
CVE-2015-3900
-
Medium
RubyGems 7PK - Security Features Vulnerability (CVE-2015-3900)
CVE-2015-3900
-
Medium
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-3902)
CVE-2015-3902
CWE-352
Medium
phpMyAdmin Cryptographic Issues Vulnerability (CVE-2015-3903)
CVE-2015-3903
-
Medium
Coppermine Open Redirection Vulnerability (CVE-2015-3922)
CVE-2015-3922
-
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3935)
CVE-2015-3935
CWE-707
Medium
phpBB URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-3880)
CVE-2015-3880
CWE-601
Medium
Django Other Vulnerability (CVE-2015-3982)
CVE-2015-3982
-
Medium
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3989)
CVE-2015-3989
CWE-707
Medium
Oracle Database Server CVE-2014-6547 Vulnerability (CVE-2014-6547)
CVE-2014-6547
-
Medium
RubyGems Improper Input Validation Vulnerability (CVE-2015-4020)
CVE-2015-4020
CWE-20
Medium
PHP Numeric Errors Vulnerability (CVE-2015-4021)
CVE-2015-4021
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2015-4024)
CVE-2015-4024
-
Medium
qdPM Sensitive Information Disclosure Vulnerability (CVE-2015-3882)
CVE-2015-3882
-
Medium
Magento Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3458)
CVE-2015-3458
CWE-264
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3274)
CVE-2015-3274
CWE-707
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3412)
CVE-2015-3412
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3275)
CVE-2015-3275
CWE-707
Medium
markdown-it Improper Access Control Vulnerability (CVE-2015-3295)
CVE-2015-3295
CWE-284
Medium
PHP Improper Input Validation Vulnerability (CVE-2015-3330)
CVE-2015-3330
CWE-20
Medium
PHP Improper Input Validation Vulnerability (CVE-2015-3411)
CVE-2015-3411
CWE-20
Medium
Oracle Database Server CVE-2014-6578 Vulnerability (CVE-2014-6578)
CVE-2014-6578
-
Medium
Oracle Database Server CVE-2014-6577 Vulnerability (CVE-2014-6577)
CVE-2014-6577
-
Medium
MySQL CVE-2014-6564 Vulnerability (CVE-2014-6564)
CVE-2014-6564
-
Medium
Magento Improper Authentication Vulnerability (CVE-2015-3457)
CVE-2015-3457
CWE-287
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3438)
CVE-2015-3438
CWE-707
Medium
Oracle Database Server CVE-2014-6563 Vulnerability (CVE-2014-6563)
CVE-2014-6563
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3439)
CVE-2015-3439
CWE-707
Medium
MySQL CVE-2014-6559 Vulnerability (CVE-2014-6559)
CVE-2014-6559
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3440)
CVE-2015-3440
CWE-707
Medium
MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)
CVE-2014-6555
-
Medium
osCommerce Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2965)
CVE-2015-2965
CWE-22
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2948)
CVE-2015-2948
CWE-707
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-1849)
CVE-2015-1849
CWE-200
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2332)
CVE-2015-2332
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2272)
CVE-2015-2272
CWE-264
Medium
Ruby Other Vulnerability (CVE-2014-8080)
CVE-2014-8080
-
Medium
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-2305)
CVE-2015-2305
CWE-190
Medium
Django Resource Management Errors Vulnerability (CVE-2015-2316)
CVE-2015-2316
-
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2317)
CVE-2015-2317
CWE-707
Medium
PHP Out-of-bounds Read Vulnerability (CVE-2015-2326)
CVE-2015-2326
CWE-125
Medium
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7987)
CVE-2014-7987
CWE-707
Medium
Moodle DEPRECATED: Code Vulnerability (CVE-2015-2270)
CVE-2015-2270
-
Medium
EspoCRM Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7986)
CVE-2014-7986
CWE-264
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2333)
CVE-2015-2333
CWE-707
Medium
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-2334)
CVE-2015-2334
CWE-352
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2335)
CVE-2015-2335
CWE-200
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2348)
CVE-2015-2348
CWE-264
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7983)
CVE-2014-7983
CWE-707
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2271)
CVE-2015-2271
CWE-264
Medium
Moodle Resource Management Errors Vulnerability (CVE-2015-2268)
CVE-2015-2268
-
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7853)
CVE-2014-7853
CWE-200
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2034)
CVE-2015-2034
CWE-707
Medium
Ruby Improper Input Validation Vulnerability (CVE-2015-1855)
CVE-2015-1855
CWE-20
Medium
Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1866)
CVE-2015-1866
CWE-707
Medium
IBM RTC Improper Input Validation Vulnerability (CVE-2015-1928)
CVE-2015-1928
CWE-20
Medium
IBM RTC CVE-2015-1971 Vulnerability (CVE-2015-1971)
CVE-2015-1971
-
Medium
Apache HTTP Server Incorrect Authorization Vulnerability (CVE-2014-8109)
CVE-2014-8109
CWE-863
Medium
OpenVPN AS Resource Management Errors Vulnerability (CVE-2014-8104)
CVE-2014-8104
-
Medium
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2035)
CVE-2015-2035
CWE-138
Medium
Moodle Improper Access Control Vulnerability (CVE-2015-2267)
CVE-2015-2267
CWE-284
Medium
Ruby Other Vulnerability (CVE-2014-8090)
CVE-2014-8090
-
Medium
Osclass Other Vulnerability (CVE-2014-8085)
CVE-2014-8085
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2206)
CVE-2015-2206
CWE-200
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2241)
CVE-2015-2241
CWE-707
Medium
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2250)
CVE-2015-2250
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2266)
CVE-2015-2266
CWE-200
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7982)
CVE-2014-7982
CWE-707
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7849)
CVE-2014-7849
CWE-264
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2941)
CVE-2015-2941
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-2783)
CVE-2015-2783
CWE-119
Medium