Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2017-10284 Vulnerability (CVE-2017-10284)
CVE-2017-10284
-
Medium
MySQL CVE-2017-10286 Vulnerability (CVE-2017-10286)
CVE-2017-10286
-
Medium
Oracle JRE CVE-2017-10293 Vulnerability (CVE-2017-10293)
CVE-2017-10293
-
Medium
WebLogic CVE-2017-10178 Vulnerability (CVE-2017-10178)
CVE-2017-10178
-
Medium
MySQL CVE-2017-10165 Vulnerability (CVE-2017-10165)
CVE-2017-10165
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000398)
CVE-2017-1000398
CWE-200
Medium
Plone CMS CVE-2017-1000483 Vulnerability (CVE-2017-1000483)
CVE-2017-1000483
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)
CVE-2017-1000399
CWE-200
Medium
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)
CVE-2017-1000400
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000425)
CVE-2017-1000425
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000481)
CVE-2017-1000481
CWE-601
Medium
CubeCart Improper Authentication Vulnerability (CVE-2014-2341)
CVE-2014-2341
CWE-287
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000482)
CVE-2017-1000482
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000484)
CVE-2017-1000484
CWE-601
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10152)
CVE-2017-10152
CWE-200
Medium
Lighttpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2324)
CVE-2014-2324
CWE-22
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000509)
CVE-2017-1000509
CWE-707
Medium
WebLogic CVE-2017-10063 Vulnerability (CVE-2017-10063)
CVE-2017-10063
-
Medium
Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2314)
CVE-2014-2314
CWE-22
Medium
WebLogic CVE-2017-10123 Vulnerability (CVE-2017-10123)
CVE-2017-10123
-
Medium
WebLogic CVE-2017-10148 Vulnerability (CVE-2017-10148)
CVE-2017-10148
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9848)
CVE-2016-9848
CWE-200
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9751)
CVE-2016-9751
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-7137)
CVE-2016-7137
CWE-601
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-8612)
CVE-2016-8612
CWE-20
Medium
MySQL CVE-2016-8287 Vulnerability (CVE-2016-8287)
CVE-2016-8287
-
Medium
MySQL CVE-2014-2436 Vulnerability (CVE-2014-2436)
CVE-2014-2436
-
Medium
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8289)
CVE-2016-8289
CWE-264
Medium
MySQL CVE-2016-8290 Vulnerability (CVE-2016-8290)
CVE-2016-8290
-
Medium
MySQL CVE-2016-8318 Vulnerability (CVE-2016-8318)
CVE-2016-8318
-
Medium
MySQL CVE-2016-8327 Vulnerability (CVE-2016-8327)
CVE-2016-8327
-
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8627)
CVE-2016-8627
CWE-400
Medium
MySQL CVE-2014-2442 Vulnerability (CVE-2014-2442)
CVE-2014-2442
-
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-8642)
CVE-2016-8642
CWE-284
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-8643)
CVE-2016-8643
CWE-284
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8644)
CVE-2016-8644
CWE-264
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9126)
CVE-2016-9126
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9128)
CVE-2016-9128
CWE-707
Medium
ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9129)
CVE-2016-9129
CWE-200
Medium
MySQL CVE-2014-2440 Vulnerability (CVE-2014-2440)
CVE-2014-2440
-
Medium
MySQL CVE-2016-8283 Vulnerability (CVE-2016-8283)
CVE-2016-8283
-
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9130)
CVE-2016-9130
CWE-707
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7150)
CVE-2016-7150
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7138)
CVE-2016-7138
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7139)
CVE-2016-7139
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7140)
CVE-2016-7140
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7147)
CVE-2016-7147
CWE-707
Medium
b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7149)
CVE-2016-7149
CWE-707
Medium
MySQL CVE-2014-2450 Vulnerability (CVE-2014-2450)
CVE-2014-2450
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7168)
CVE-2016-7168
CWE-707
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7572)
CVE-2016-7572
CWE-264
Medium
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7169)
CVE-2016-7169
CWE-22
Medium
MySQL CVE-2014-2444 Vulnerability (CVE-2014-2444)
CVE-2014-2444
-
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7419)
CVE-2016-7419
CWE-707
Medium
MySQL CVE-2016-7440 Vulnerability (CVE-2016-7440)
CVE-2016-7440
-
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7570)
CVE-2016-7570
CWE-264
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7571)
CVE-2016-7571
CWE-707
Medium
MySQL CVE-2014-2435 Vulnerability (CVE-2014-2435)
CVE-2014-2435
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9188)
CVE-2016-9188
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9746)
CVE-2016-9746
CWE-707
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9468)
CVE-2016-9468
CWE-284
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9461)
CVE-2016-9461
CWE-284
Medium
Oracle JRE CVE-2014-2422 Vulnerability (CVE-2014-2422)
CVE-2014-2422
-
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9462)
CVE-2016-9462
CWE-284
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9465)
CVE-2016-9465
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9466)
CVE-2016-9466
CWE-707
Medium
ownCloud Improper Access Control Vulnerability (CVE-2016-9467)
CVE-2016-9467
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9472)
CVE-2016-9472
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9459)
CVE-2016-9459
CWE-707
Medium
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-9585)
CVE-2016-9585
CWE-502
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9681)
CVE-2016-9681
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9700)
CVE-2016-9700
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9701)
CVE-2016-9701
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9733)
CVE-2016-9733
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9735)
CVE-2016-9735
CWE-200
Medium