Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP Numeric Errors Vulnerability (CVE-2014-3587)
CVE-2014-3587
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3597)
CVE-2014-3597
CWE-119
Medium
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-2562)
CVE-2016-2562
CWE-20
Medium
WordPress 7PK - Security Features Vulnerability (CVE-2016-10148)
CVE-2016-10148
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3667)
CVE-2014-3667
CWE-200
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0724)
CVE-2016-0724
CWE-200
Medium
Backbone.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10537)
CVE-2016-10537
CWE-707
Medium
Werkzeug WSGI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10516)
CVE-2016-10516
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0725)
CVE-2016-0725
CWE-707
Medium
Nginx Resource Management Errors Vulnerability (CVE-2016-0747)
CVE-2016-0747
-
Medium
Piwigo Improper Access Control Vulnerability (CVE-2016-10514)
CVE-2016-10514
CWE-284
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10513)
CVE-2016-10513
CWE-707
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-0753)
CVE-2016-0753
CWE-20
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10404)
CVE-2016-10404
CWE-707
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3662)
CVE-2014-3662
CWE-200
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10083)
CVE-2016-10083
CWE-707
Medium
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0706)
CVE-2016-0706
CWE-200
Medium
ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1000307)
CVE-2016-1000307
CWE-707
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0762)
CVE-2016-0762
CWE-264
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3665)
CVE-2014-3665
CWE-264
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3663)
CVE-2014-3663
CWE-264
Medium
Twisted Web HTTP Server Direct Request ('Forced Browsing') Vulnerability (CVE-2016-1000111)
CVE-2016-1000111
CWE-425
Medium
Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-1000110)
CVE-2016-1000110
CWE-601
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2016-0800)
CVE-2016-0800
-
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0790)
CVE-2016-0790
CWE-200
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0763)
CVE-2016-0763
CWE-264
Medium
Jenkins Improper Input Validation Vulnerability (CVE-2016-0789)
CVE-2016-0789
CWE-20
Medium
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-3664)
CVE-2014-3664
CWE-22
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10704)
CVE-2016-10704
CWE-707
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0704)
CVE-2016-0704
CWE-200
Medium
PHP Improper Input Validation Vulnerability (CVE-2014-3710)
CVE-2014-3710
CWE-20
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1498)
CVE-2016-1498
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2040)
CVE-2016-2040
CWE-707
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2039)
CVE-2016-2039
CWE-200
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3681)
CVE-2014-3681
CWE-707
Medium
WebLogic CVE-2016-0675 Vulnerability (CVE-2016-0675)
CVE-2016-0675
-
Medium
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2038)
CVE-2016-2038
CWE-200
Medium
Squid Improper Input Validation Vulnerability (CVE-2014-3609)
CVE-2014-3609
CWE-20
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1912)
CVE-2016-1912
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1564)
CVE-2016-1564
CWE-707
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-1546)
CVE-2016-1546
-
Medium
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1501)
CVE-2016-1501
CWE-200
Medium
Nginx Insufficient Session Expiration Vulnerability (CVE-2014-3616)
CVE-2014-3616
CWE-613
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3617)
CVE-2014-3617
CWE-264
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0703)
CVE-2016-0703
CWE-200
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3680)
CVE-2014-3680
CWE-200
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10872)
CVE-2016-10872
CWE-707
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3727)
CVE-2016-3727
CWE-200
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10737)
CVE-2016-10737
CWE-707
Medium
Jenkins Resource Management Errors Vulnerability (CVE-2014-3661)
CVE-2014-3661
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3670)
CVE-2014-3670
CWE-119
Medium
MongoDb Use of Uninitialized Variable Vulnerability (CVE-2026-9754)
CVE-2026-9754
CWE-457
Medium
Bootstrap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10735)
CVE-2016-10735
CWE-707
Medium
WebLogic CVE-2016-0696 Vulnerability (CVE-2016-0696)
CVE-2016-0696
-
Medium
WebLogic CVE-2016-0700 Vulnerability (CVE-2016-0700)
CVE-2016-0700
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3668)
CVE-2014-3668
CWE-119
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0702)
CVE-2016-0702
CWE-200
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3832)
CVE-2014-3832
CWE-707
Medium
Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3810)
CVE-2014-3810
CWE-138
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2864)
CVE-2016-2864
CWE-707
Medium
MySQL CVE-2016-3492 Vulnerability (CVE-2016-3492)
CVE-2016-3492
-
Medium
MySQL CVE-2016-3588 Vulnerability (CVE-2016-3588)
CVE-2016-3588
-
Medium
Ruby on Rails Data Processing Errors Vulnerability (CVE-2014-3916)
CVE-2014-3916
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3542)
CVE-2014-3542
CWE-200
Medium
MySQL CVE-2016-0616 Vulnerability (CVE-2016-0616)
CVE-2016-0616
-
Medium
MySQL CVE-2016-3521 Vulnerability (CVE-2016-3521)
CVE-2016-3521
-
Medium
MySQL CVE-2016-3518 Vulnerability (CVE-2016-3518)
CVE-2016-3518
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3543)
CVE-2014-3543
CWE-200
Medium
MySQL CVE-2016-0640 Vulnerability (CVE-2016-0640)
CVE-2016-0640
-
Medium
MySQL CVE-2016-3501 Vulnerability (CVE-2016-3501)
CVE-2016-3501
-
Medium
MySQL CVE-2016-3486 Vulnerability (CVE-2016-3486)
CVE-2016-3486
-
Medium
MySQL CVE-2016-3614 Vulnerability (CVE-2016-3614)
CVE-2016-3614
-
Medium
MySQL CVE-2016-0641 Vulnerability (CVE-2016-0641)
CVE-2016-0641
-
Medium
MySQL CVE-2016-0642 Vulnerability (CVE-2016-0642)
CVE-2016-0642
-
Medium
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3545)
CVE-2014-3545
CWE-94
Medium