Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3900)
CVE-2014-3900
CWE-707
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3838)
CVE-2014-3838
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3546)
CVE-2014-3546
CWE-264
Medium
MySQL CVE-2016-3459 Vulnerability (CVE-2016-3459)
CVE-2016-3459
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3547)
CVE-2014-3547
CWE-707
Medium
WebLogic CVE-2016-3445 Vulnerability (CVE-2016-3445)
CVE-2016-3445
-
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3837)
CVE-2014-3837
CWE-264
Medium
GlassFish CVE-2016-3608 Vulnerability (CVE-2016-3608)
CVE-2016-3608
-
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2014-3941)
CVE-2014-3941
CWE-20
Medium
WebLogic CVE-2016-3416 Vulnerability (CVE-2016-3416)
CVE-2016-3416
-
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2014-3945)
CVE-2014-3945
CWE-287
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3508)
CVE-2014-3508
CWE-200
Medium
MySQL CVE-2016-0596 Vulnerability (CVE-2016-0596)
CVE-2016-0596
-
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-3509)
CVE-2014-3509
CWE-362
Medium
MySQL CVE-2016-0597 Vulnerability (CVE-2016-0597)
CVE-2016-0597
-
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3725)
CVE-2016-3725
CWE-264
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3963)
CVE-2014-3963
CWE-264
Medium
OpenSSL Other Vulnerability (CVE-2014-3510)
CVE-2014-3510
-
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3946)
CVE-2014-3946
CWE-200
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3724)
CVE-2016-3724
CWE-200
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2014-3944)
CVE-2014-3944
CWE-287
Medium
MySQL Improper Access Control Vulnerability (CVE-2016-0611)
CVE-2016-0611
CWE-284
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3723)
CVE-2016-3723
CWE-200
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3722)
CVE-2016-3722
CWE-264
Medium
Jenkins DEPRECATED: Code Vulnerability (CVE-2016-3721)
CVE-2016-3721
-
Medium
Dot CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3688)
CVE-2016-3688
CWE-200
Medium
MySQL CVE-2016-3615 Vulnerability (CVE-2016-3615)
CVE-2016-3615
-
Medium
OpenSSL CVE-2014-3511 Vulnerability (CVE-2014-3511)
CVE-2014-3511
-
Medium
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
CVE-2014-3518
CWE-94
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-3523)
CVE-2014-3523
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-3538)
CVE-2014-3538
-
Medium
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3942)
CVE-2014-3942
CWE-94
Medium
MySQL CVE-2016-3424 Vulnerability (CVE-2016-3424)
CVE-2016-3424
-
Medium
MySQL CVE-2016-3495 Vulnerability (CVE-2016-3495)
CVE-2016-3495
-
Medium
Python Other Vulnerability (CVE-2016-3189)
CVE-2016-3189
-
Medium
MySQL CVE-2016-0644 Vulnerability (CVE-2016-0644)
CVE-2016-0644
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3550)
CVE-2014-3550
CWE-707
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3836)
CVE-2014-3836
CWE-352
Medium
MySQL CVE-2016-0646 Vulnerability (CVE-2016-0646)
CVE-2016-0646
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3014)
CVE-2016-3014
CWE-707
Medium
Moodle Improper Authentication Vulnerability (CVE-2014-3552)
CVE-2014-3552
CWE-287
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3835)
CVE-2014-3835
CWE-264
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2987)
CVE-2016-2987
CWE-200
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3833)
CVE-2014-3833
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3018)
CVE-2016-3018
CWE-707
Medium
MySQL CVE-2016-0647 Vulnerability (CVE-2016-0647)
CVE-2016-0647
-
Medium
MySQL CVE-2016-0648 Vulnerability (CVE-2016-0648)
CVE-2016-0648
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2986)
CVE-2016-2986
CWE-707
Medium
MySQL CVE-2016-0649 Vulnerability (CVE-2016-0649)
CVE-2016-0649
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3553)
CVE-2014-3553
CWE-264
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2926)
CVE-2016-2926
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2865)
CVE-2016-2865
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3549)
CVE-2014-3549
CWE-707
Medium
Python Protection Mechanism Failure Vulnerability (CVE-2016-0772)
CVE-2016-0772
CWE-693
Medium
Drupal Other Vulnerability (CVE-2016-3166)
CVE-2016-3166
-
Medium
Drupal 7PK - Security Features Vulnerability (CVE-2016-3168)
CVE-2016-3168
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3548)
CVE-2014-3548
CWE-707
Medium
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3170)
CVE-2016-3170
CWE-200
Medium
Oracle JRE CVE-2023-22044 Vulnerability (CVE-2023-22044)
CVE-2023-22044
-
Low
Java Unspesificed Vulnerability (CVE-2019-2422)
CVE-2019-2422
-
Low
PHP Other Vulnerability (CVE-2006-1014)
CVE-2006-1014
-
Low
MySQL CVE-2014-2432 Vulnerability (CVE-2014-2432)
CVE-2014-2432
-
Low
Phusion Passenger Other Vulnerability (CVE-2014-1832)
CVE-2014-1832
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7074)
CVE-2013-7074
CWE-707
Low
PHP Other Vulnerability (CVE-2005-3319)
CVE-2005-3319
-
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-3164)
CVE-2005-3164
CWE-200
Low
Oracle Application Server Other Vulnerability (CVE-2002-0568)
CVE-2002-0568
-
Low
Oracle JRE CVE-2013-2415 Vulnerability (CVE-2013-2415)
CVE-2013-2415
-
Low
Web Server Cache Poisoning (CMS Made Simple) v1.x
CVE-2016-2784
CWE-20
Low
Oracle JRE CVE-2014-2398 Vulnerability (CVE-2014-2398)
CVE-2014-2398
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3943)
CVE-2014-3943
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8960)
CVE-2014-8960
CWE-707
Low
MySQL CVE-2014-2431 Vulnerability (CVE-2014-2431)
CVE-2014-2431
-
Low
MySQL CVE-2014-2430 Vulnerability (CVE-2014-2430)
CVE-2014-2430
-
Low
Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422)
CVE-2002-0422
CWE-200
Low