🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15405 vulnerabilities
in this category.
Critical: 1674
High: 4167
Medium: 8767
Low: 793
Information: 4
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2016-5624 Vulnerability (CVE-2016-5624)
CVE-2016-5624
-
Medium
MySQL CVE-2016-5634 Vulnerability (CVE-2016-5634)
CVE-2016-5634
-
Medium
MySQL CVE-2016-5635 Vulnerability (CVE-2016-5635)
CVE-2016-5635
-
Medium
Swagger UI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5682)
CVE-2016-5682
CWE-707
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3454)
CVE-2014-3454
CWE-352
Medium
Collabtive Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3247)
CVE-2014-3247
CWE-707
Medium
Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3246)
CVE-2014-3246
CWE-138
Medium
MySQL CVE-2016-5626 Vulnerability (CVE-2016-5626)
CVE-2016-5626
-
Medium
MySQL CVE-2016-5612 Vulnerability (CVE-2016-5612)
CVE-2016-5612
-
Medium
MySQL CVE-2016-5442 Vulnerability (CVE-2016-5442)
CVE-2016-5442
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3470)
CVE-2014-3470
-
Medium
MySQL CVE-2016-5443 Vulnerability (CVE-2016-5443)
CVE-2016-5443
-
Medium
PHP CVE-2014-3479 Vulnerability (CVE-2014-3479)
CVE-2014-3479
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3478)
CVE-2014-3478
CWE-119
Medium
GlassFish CVE-2016-5477 Vulnerability (CVE-2016-5477)
CVE-2016-5477
-
Medium
WebLogic CVE-2016-5488 Vulnerability (CVE-2016-5488)
CVE-2016-5488
-
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3472)
CVE-2014-3472
CWE-264
Medium
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5505)
CVE-2016-5505
CWE-200
Medium
MySQL CVE-2016-5609 Vulnerability (CVE-2016-5609)
CVE-2016-5609
-
Medium
MySQL CVE-2016-5507 Vulnerability (CVE-2016-5507)
CVE-2016-5507
-
Medium
MySQL CVE-2016-0595 Vulnerability (CVE-2016-0595)
CVE-2016-0595
-
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3464)
CVE-2014-3464
CWE-264
Medium
Oracle Database Server CVE-2016-5516 Vulnerability (CVE-2016-5516)
CVE-2016-5516
-
Medium
MySQL CVE-2016-5584 Vulnerability (CVE-2016-5584)
CVE-2016-5584
-
Medium
WebLogic Improper Access Control Vulnerability (CVE-2016-5601)
CVE-2016-5601
CWE-284
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-7128)
CVE-2016-7128
CWE-200
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7136)
CVE-2016-7136
CWE-707
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-3729)
CVE-2016-3729
CWE-284
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-0365)
CVE-2017-0365
CWE-707
Medium
Oracle JRE CVE-2014-2403 Vulnerability (CVE-2014-2403)
CVE-2014-2403
-
Medium
Oracle Database Server CVE-2014-2408 Vulnerability (CVE-2014-2408)
CVE-2014-2408
-
Medium
Oracle JRE CVE-2014-2409 Vulnerability (CVE-2014-2409)
CVE-2014-2409
-
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)
CVE-2017-1000392
CWE-707
Medium
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-1000355)
CVE-2017-1000355
CWE-502
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000223)
CVE-2017-1000223
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000015)
CVE-2017-1000015
CWE-707
Medium
Oracle JRE CVE-2014-2413 Vulnerability (CVE-2014-2413)
CVE-2014-2413
-
Medium
phpMyAdmin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000013)
CVE-2017-1000013
CWE-601
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0370)
CVE-2017-0370
CWE-20
Medium
MySQL CVE-2014-2419 Vulnerability (CVE-2014-2419)
CVE-2014-2419
-
Medium
MediaWiki Incorrect Default Permissions Vulnerability (CVE-2017-0369)
CVE-2017-0369
CWE-276
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0368)
CVE-2017-0368
CWE-20
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0366)
CVE-2017-0366
CWE-20
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0364)
CVE-2017-0364
CWE-601
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000395)
CVE-2017-1000395
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9856)
CVE-2016-9856
CWE-707
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9850)
CVE-2016-9850
-
Medium
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9851)
CVE-2016-9851
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9852)
CVE-2016-9852
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9853)
CVE-2016-9853
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9854)
CVE-2016-9854
CWE-200
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9855)
CVE-2016-9855
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9857)
CVE-2016-9857
CWE-707
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0363)
CVE-2017-0363
CWE-601
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9858)
CVE-2016-9858
CWE-20
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9859)
CVE-2016-9859
CWE-20
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9860)
CVE-2016-9860
CWE-20
Medium
Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9891)
CVE-2016-9891
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9973)
CVE-2016-9973
CWE-707
Medium
ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0256)
CVE-2017-0256
CWE-20
Medium
Oracle JRE CVE-2014-2401 Vulnerability (CVE-2014-2401)
CVE-2014-2401
-
Medium
Jenkins Improper Certificate Validation Vulnerability (CVE-2017-1000396)
CVE-2017-1000396
CWE-295
Medium
phpMyAdmin Cryptographic Issues Vulnerability (CVE-2016-9847)
CVE-2016-9847
-
Medium
MySQL CVE-2017-10276 Vulnerability (CVE-2017-10276)
CVE-2017-10276
-
Medium
MySQL CVE-2017-10227 Vulnerability (CVE-2017-10227)
CVE-2017-10227
-
Medium
Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2313)
CVE-2014-2313
CWE-22
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)
CVE-2017-10268
CWE-200
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-2270)
CVE-2014-2270
CWE-119
Medium
Oracle JRE CVE-2017-10274 Vulnerability (CVE-2017-10274)
CVE-2017-10274
-
Medium
WP Plugin Contact Form 7 Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2265)
CVE-2014-2265
CWE-264
Medium
MySQL CVE-2017-10279 Vulnerability (CVE-2017-10279)
CVE-2017-10279
-
Medium
MySQL CVE-2017-10167 Vulnerability (CVE-2017-10167)
CVE-2017-10167
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2244)
CVE-2014-2244
CWE-707
Medium
Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)
CVE-2017-10281
-
Medium
MySQL CVE-2017-10283 Vulnerability (CVE-2017-10283)
CVE-2017-10283
-
Medium
«
1
...
190
191
192
...
206
»