Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2364)
CVE-2012-2364
CWE-707
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2365)
CVE-2012-2365
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2960)
CVE-2008-2960
CWE-707
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-4962)
CVE-2015-4962
CWE-200
Low
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946)
CVE-2015-4946
CWE-264
Low
Oracle Application Server CVE-2008-2619 Vulnerability (CVE-2008-2619)
CVE-2008-2619
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1606)
CVE-2012-1606
CWE-707
Low
Drupal Resource Management Errors Vulnerability (CVE-2012-1588)
CVE-2012-1588
-
Low
Next.js Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2025-32421)
CVE-2025-32421
CWE-362
Low
Moodle CVE-2023-5543 Vulnerability (CVE-2023-5543)
CVE-2023-5543
-
Low
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1279)
CVE-2009-1279
CWE-707
Low
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-32789)
CVE-2025-32789
CWE-200
Low
concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3111)
CVE-2021-3111
CWE-707
Low
XWikiplatform Incorrect Authorization Vulnerability (CVE-2025-32971)
CVE-2025-32971
CWE-863
Low
WebLogic Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-8908)
CVE-2020-8908
CWE-732
Low
Python Use After Free Vulnerability (CVE-2018-1000030)
CVE-2018-1000030
CWE-416
Low
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0800)
CVE-2012-0800
CWE-200
Low
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-3635)
CVE-2025-3635
CWE-352
Low
Moodle Use of GET Request Method With Sensitive Query Strings Vulnerability (CVE-2025-3637)
CVE-2025-3637
CWE-598
Low
Moodle CVE-2023-5551 Vulnerability (CVE-2023-5551)
CVE-2023-5551
-
Low
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8481)
CVE-2015-8481
CWE-200
Low
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0827)
CVE-2012-0827
CWE-264
Low
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2009-0754)
CVE-2009-0754
CWE-134
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0737)
CVE-2009-0737
CWE-707
Low
OpenSSL Improper Authentication Vulnerability (CVE-2009-0591)
CVE-2009-0591
CWE-287
Low
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5814)
CVE-2008-5814
CWE-707
Low
Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8105)
CVE-2015-8105
-
Low
MediaWiki Improper Access Control Vulnerability (CVE-2015-8001)
CVE-2015-8001
CWE-284
Low
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0976)
CVE-2012-0976
CWE-707
Low
SharePoint CVE-2021-40483 Vulnerability (CVE-2021-40483)
CVE-2021-40483
-
Low
SharePoint CVE-2021-40484 Vulnerability (CVE-2021-40484)
CVE-2021-40484
-
Low
Ruby on Rails 7PK - Security Features Vulnerability (CVE-2015-7576)
CVE-2015-7576
-
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449)
CVE-2015-7449
CWE-200
Low
Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2012-1160)
CVE-2012-1160
CWE-732
Low
ReviveAdserver Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7368)
CVE-2015-7368
CWE-200
Low
PHP Use After Free Vulnerability (CVE-2020-7068)
CVE-2020-7068
CWE-416
Low
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1253)
CVE-2012-1253
CWE-707
Low
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1413)
CVE-2012-1413
CWE-707
Low
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6299)
CVE-2008-6299
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6170)
CVE-2008-6170
CWE-707
Low
MySQL CVE-2017-3650 Vulnerability (CVE-2017-3650)
CVE-2017-3650
-
Low
Drupal Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-13083)
CVE-2025-13083
CWE-525
Low
MySQL CVE-2015-4910 Vulnerability (CVE-2015-4910)
CVE-2015-4910
-
Low
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28566)
CVE-2021-28566
CWE-200
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2204)
CVE-2011-2204
CWE-200
Low
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4883)
CVE-2010-4883
CWE-707
Low
Oracle Database Server CVE-2011-2240 Vulnerability (CVE-2011-2240)
CVE-2011-2240
-
Low
Oracle Database Server CVE-2011-2242 Vulnerability (CVE-2011-2242)
CVE-2011-2242
-
Low
Oracle Database Server CVE-2011-2243 Vulnerability (CVE-2011-2243)
CVE-2011-2243
-
Low
Oracle Database Server CVE-2011-2322 Vulnerability (CVE-2011-2322)
CVE-2011-2322
-
Low
Oracle JRE CVE-2017-10345 Vulnerability (CVE-2017-10345)
CVE-2017-10345
-
Low
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4624)
CVE-2010-4624
CWE-264
Low
SharePoint CVE-2024-26251 Vulnerability (CVE-2024-26251)
CVE-2024-26251
-
Low
MySQL CVE-2017-10365 Vulnerability (CVE-2017-10365)
CVE-2017-10365
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2642)
CVE-2011-2642
CWE-707
Low
Oracle Database Server CVE-2010-4420 Vulnerability (CVE-2010-4420)
CVE-2010-4420
-
Low
Jboss EAP Other Vulnerability (CVE-2010-4265)
CVE-2010-4265
-
Low
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-5702)
CVE-2016-5702
-
Low
Oracle Database Server SYS Account privilege issue (CVE-2021-2000)
CVE-2021-2000
-
Low
Moodle Insecure Storage of Sensitive Information Vulnerability (CVE-2024-43427)
CVE-2024-43427
CWE-922
Low
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-3862)
CVE-2010-3862
CWE-20
Low
Jetty Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-28163)
CVE-2021-28163
CWE-59
Low
Apache Tomcat Other Vulnerability (CVE-2010-3718)
CVE-2010-3718
-
Low
Joomla CVE-2017-14595 Vulnerability (CVE-2017-14595)
CVE-2017-14595
-
Low
Oracle Database Server CVE-2011-3511 Vulnerability (CVE-2011-3511)
CVE-2011-3511
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3591)
CVE-2011-3591
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3592)
CVE-2011-3592
CWE-707
Low
Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5499)
CVE-2016-5499
CWE-264
Low
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5498)
CVE-2016-5498
CWE-200
Low
MySQL CVE-2016-5444 Vulnerability (CVE-2016-5444)
CVE-2016-5444
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3094)
CVE-2010-3094
CWE-707
Low
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3093)
CVE-2010-3093
CWE-264
Low
Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3089)
CVE-2010-3089
CWE-707
Low
Cherokee Cryptographic Issues Vulnerability (CVE-2011-2190)
CVE-2011-2190
-
Low
Oracle Database Server CVE-2017-10120 Vulnerability (CVE-2017-10120)
CVE-2017-10120
-
Low