Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-1879)
CVE-2014-1879
CWE-707
Low
MySQL CVE-2022-39403 Vulnerability (CVE-2022-39403)
CVE-2022-39403
-
Low
Werkzeug WSGI CVE-2023-23934 Vulnerability (CVE-2023-23934)
CVE-2023-23934
-
Low
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2047)
CVE-2013-2047
CWE-264
Low
Oracle Database Server CVE-2014-6544 Vulnerability (CVE-2014-6544)
CVE-2014-6544
-
Low
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2042)
CVE-2013-2042
CWE-707
Low
OpenVPN AS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2061)
CVE-2013-2061
CWE-200
Low
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2041)
CVE-2013-2041
CWE-707
Low
Lighttpd Other Vulnerability (CVE-2006-0760)
CVE-2006-0760
-
Low
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666)
CVE-2026-7666
CWE-319
Low
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-0208)
CVE-2006-0208
CWE-707
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7830)
CVE-2014-7830
CWE-707
Low
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7827)
CVE-2014-7827
CWE-264
Low
Phusion Passenger Other Vulnerability (CVE-2014-1832)
CVE-2014-1832
-
Low
MySQL CVE-2019-2911 Vulnerability (CVE-2019-2911)
CVE-2019-2911
-
Low
MySQL CVE-2014-6463 Vulnerability (CVE-2014-6463)
CVE-2014-6463
-
Low
axios Improper Encoding or Escaping of Output Vulnerability (CVE-2026-42040)
CVE-2026-42040
CWE-116
Low
MySQL CVE-2023-21882 Vulnerability (CVE-2023-21882)
CVE-2023-21882
-
Low
MySQL CVE-2014-4214 Vulnerability (CVE-2014-4214)
CVE-2014-4214
-
Low
MySQL CVE-2013-5908 Vulnerability (CVE-2013-5908)
CVE-2013-5908
-
Low
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4340)
CVE-2013-4340
CWE-264
Low
Oracle JRE CVE-2023-21843 Vulnerability (CVE-2023-21843)
CVE-2023-21843
-
Low
MySQL CVE-2019-2730 Vulnerability (CVE-2019-2730)
CVE-2019-2730
-
Low
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-3981)
CVE-2014-3981
CWE-59
Low
MySQL CVE-2019-2738 Vulnerability (CVE-2019-2738)
CVE-2019-2738
-
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3966)
CVE-2014-3966
CWE-707
Low
Apache HTTP Server Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2001-0131)
CVE-2001-0131
CWE-59
Low
Oracle JRE CVE-2020-14577 Vulnerability (CVE-2020-14577)
CVE-2020-14577
-
Low
Oracle JRE CVE-2013-5854 Vulnerability (CVE-2013-5854)
CVE-2013-5854
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4523)
CVE-2013-4523
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3943)
CVE-2014-3943
CWE-707
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4525)
CVE-2013-4525
CWE-707
Low
OpenSSL Covert Channel Vulnerability (CVE-2026-42768)
CVE-2026-42768
CWE-514
Low
Java Unspesificed Vulnerability (CVE-2019-2766)
CVE-2019-2766
-
Low
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-42770)
CVE-2026-42770
CWE-325
Low
Internet Information Services Other Vulnerability (CVE-2001-0544)
CVE-2001-0544
-
Low
Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)
CVE-2026-43514
CWE-208
Low
Grafana Improper Preservation of Permissions Vulnerability (CVE-2022-36062)
CVE-2022-36062
CWE-281
Low
Oracle JRE CVE-2020-14581 Vulnerability (CVE-2020-14581)
CVE-2020-14581
-
Low
Java Unspesificed Vulnerability (CVE-2019-2786)
CVE-2019-2786
-
Low
Oracle Database Server CVE-2014-4289 Vulnerability (CVE-2014-4289)
CVE-2014-4289
-
Low
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496)
CVE-2026-35496
CWE-22
Low
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4199)
CVE-2013-4199
CWE-20
Low
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4874)
CVE-2026-4874
CWE-918
Low
Roundcube Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2026-35538)
CVE-2026-35538
CWE-707
Low
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14634)
CVE-2020-14634
CWE-200
Low
Python Improper Input Validation Vulnerability (CVE-2026-4519)
CVE-2026-4519
CWE-20
Low
MySQL CVE-2020-14633 Vulnerability (CVE-2020-14633)
CVE-2020-14633
-
Low
Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767)
CVE-2020-11767
CWE-200
Low
Oracle JRE CVE-2023-21968 Vulnerability (CVE-2023-21968)
CVE-2023-21968
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6387)
CVE-2013-6387
CWE-707
Low
IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150)
CVE-2019-4150
CWE-295
Low
Django Missing Authorization Vulnerability (CVE-2026-4292)
CVE-2026-4292
CWE-862
Low
Oracle Database Server CVE-2014-4245 Vulnerability (CVE-2014-4245)
CVE-2014-4245
-
Low
Oracle Database Server Other Vulnerability (CVE-2003-0727)
CVE-2003-0727
-
Low
Oracle Database Server CVE-2023-21949 Vulnerability (CVE-2023-21949)
CVE-2023-21949
-
Low
MySQL CVE-2014-4243 Vulnerability (CVE-2014-4243)
CVE-2014-4243
-
Low
Oracle JRE CVE-2023-21938 Vulnerability (CVE-2023-21938)
CVE-2023-21938
-
Low
Oracle JRE CVE-2023-21937 Vulnerability (CVE-2023-21937)
CVE-2023-21937
-
Low
MySQL CVE-2014-4240 Vulnerability (CVE-2014-4240)
CVE-2014-4240
-
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3050)
CVE-2014-3050
CWE-200
Low
Oracle JRE CVE-2013-5803 Vulnerability (CVE-2013-5803)
CVE-2013-5803
-
Low
MySQL CVE-2019-2789 Vulnerability (CVE-2019-2789)
CVE-2019-2789
-
Low
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2003-1581)
CVE-2003-1581
CWE-707
Low
Oracle Database Server CVE-2019-2940 Vulnerability (CVE-2019-2940)
CVE-2019-2940
-
Low
Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422)
CVE-2002-0422
CWE-200
Low
MySQL CVE-2019-2814 Vulnerability (CVE-2019-2814)
CVE-2019-2814
-
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5739)
CVE-2013-5739
CWE-707
Low
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3566)
CVE-2014-3566
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4995)
CVE-2013-4995
CWE-707
Low
Java Unspesificed Vulnerability (CVE-2019-2818)
CVE-2019-2818
-
Low
Oracle JRE CVE-2019-2945 Vulnerability (CVE-2019-2945)
CVE-2019-2945
-
Low
Caddy Web Server Partial String Comparison Vulnerability (CVE-2026-45692)
CVE-2026-45692
CWE-187
Low
Next.js Use of Weak Hash Vulnerability (CVE-2026-44582)
CVE-2026-44582
-
Low
Apache HTTP Server Other Vulnerability (CVE-2002-1233)
CVE-2002-1233
-
Low