Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
ownCloud Improper Access Control Vulnerability (CVE-2016-9460)
CVE-2016-9460
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9457)
CVE-2016-9457
CWE-707
Medium
WordPress Improper Input Validation Vulnerability (CVE-2016-9263)
CVE-2016-9263
CWE-20
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9409)
CVE-2016-9409
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9404)
CVE-2016-9404
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9405)
CVE-2016-9405
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9406)
CVE-2016-9406
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9407)
CVE-2016-9407
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9408)
CVE-2016-9408
CWE-707
Medium
MySQL CVE-2014-2434 Vulnerability (CVE-2014-2434)
CVE-2014-2434
-
Medium
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9411)
CVE-2016-9411
CWE-200
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9454)
CVE-2016-9454
CWE-707
Medium
MyBB Improper Access Control Vulnerability (CVE-2016-9413)
CVE-2016-9413
CWE-284
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9419)
CVE-2016-9419
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9421)
CVE-2016-9421
CWE-707
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9449)
CVE-2016-9449
CWE-200
Medium
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-9451)
CVE-2016-9451
CWE-601
Medium
Drupal Improper Input Validation Vulnerability (CVE-2016-9452)
CVE-2016-9452
CWE-20
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2014-3507)
CVE-2014-3507
-
Medium
IBM RTC Other Vulnerability (CVE-2015-0112)
CVE-2015-0112
-
Medium
Select2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10744)
CVE-2016-10744
CWE-707
Medium
Django Improper Access Control Vulnerability (CVE-2016-2048)
CVE-2016-2048
CWE-284
Medium
MySQL CVE-2016-0661 Vulnerability (CVE-2016-0661)
CVE-2016-0661
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2156)
CVE-2016-2156
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2155)
CVE-2016-2155
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2154)
CVE-2016-2154
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2153)
CVE-2016-2153
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2152)
CVE-2016-2152
CWE-707
Medium
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2014-3581)
CVE-2014-3581
CWE-476
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2151)
CVE-2016-2151
CWE-200
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2107)
CVE-2016-2107
CWE-200
Medium
MySQL CVE-2016-0662 Vulnerability (CVE-2016-0662)
CVE-2016-0662
-
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-2097)
CVE-2016-2097
CWE-22
Medium
MySQL CVE-2016-0663 Vulnerability (CVE-2016-0663)
CVE-2016-0663
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3572)
CVE-2014-3572
-
Medium
MySQL 7PK - Security Features Vulnerability (CVE-2016-2047)
CVE-2016-2047
-
Medium
Dotclear Improper Authentication Vulnerability (CVE-2014-3781)
CVE-2014-3781
CWE-287
Medium
MySQL CVE-2016-0665 Vulnerability (CVE-2016-0665)
CVE-2016-0665
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2045)
CVE-2016-2045
CWE-707
Medium
Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3583)
CVE-2014-3583
CWE-119
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2044)
CVE-2016-2044
CWE-200
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2043)
CVE-2016-2043
CWE-707
Medium
MySQL CVE-2016-0666 Vulnerability (CVE-2016-0666)
CVE-2016-0666
-
Medium
MySQL CVE-2016-0667 Vulnerability (CVE-2016-0667)
CVE-2016-0667
-
Medium
MySQL CVE-2016-0668 Vulnerability (CVE-2016-0668)
CVE-2016-0668
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2042)
CVE-2016-2042
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2158)
CVE-2016-2158
CWE-200
Medium
Dotclear Other Vulnerability (CVE-2014-3782)
CVE-2014-3782
-
Medium
Django Improper Input Validation Vulnerability (CVE-2014-3730)
CVE-2014-3730
CWE-20
Medium
MySQL CVE-2016-0654 Vulnerability (CVE-2016-0654)
CVE-2016-0654
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2561)
CVE-2016-2561
CWE-707
Medium
MySQL CVE-2016-0650 Vulnerability (CVE-2016-0650)
CVE-2016-0650
-
Medium
MySQL CVE-2016-0651 Vulnerability (CVE-2016-0651)
CVE-2016-0651
-
Medium
MySQL CVE-2016-0652 Vulnerability (CVE-2016-0652)
CVE-2016-0652
-
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3827)
CVE-2014-3827
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2560)
CVE-2016-2560
CWE-707
Medium
MySQL CVE-2016-0653 Vulnerability (CVE-2016-0653)
CVE-2016-0653
-
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3826)
CVE-2014-3826
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)
CVE-2016-2559
CWE-707
Medium
Nginx Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2014-3556)
CVE-2014-3556
CWE-138
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3568)
CVE-2014-3568
-
Medium
OpenSSL Other Vulnerability (CVE-2014-3569)
CVE-2014-3569
-
Medium
MySQL CVE-2016-0659 Vulnerability (CVE-2016-0659)
CVE-2016-0659
-
Medium
MySQL CVE-2016-0655 Vulnerability (CVE-2016-0655)
CVE-2016-0655
-
Medium
MySQL CVE-2016-0656 Vulnerability (CVE-2016-0656)
CVE-2016-0656
-
Medium
Squid Improper Input Validation Vulnerability (CVE-2016-2390)
CVE-2016-2390
CWE-20
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3570)
CVE-2014-3570
-
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2212)
CVE-2016-2212
CWE-200
Medium
MySQL CVE-2016-0657 Vulnerability (CVE-2016-0657)
CVE-2016-0657
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2190)
CVE-2016-2190
CWE-264
Medium
MySQL CVE-2016-0658 Vulnerability (CVE-2016-0658)
CVE-2016-0658
-
Medium
OpenSSL Other Vulnerability (CVE-2014-3571)
CVE-2014-3571
-
Medium
Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)
CVE-2014-3783
CWE-138
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)
CVE-2016-2178
CWE-200
Medium
Moodle Improper Access Control Vulnerability (CVE-2016-2159)
CVE-2016-2159
CWE-284
Medium