Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP Other Vulnerability (CVE-2006-1494)
CVE-2006-1494
-
Low
MySQL CVE-2022-21249 Vulnerability (CVE-2022-21249)
CVE-2022-21249
-
Low
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26071)
CVE-2021-26071
CWE-352
Low
Oracle HTTP Server CVE-2016-0671 Vulnerability (CVE-2016-0671)
CVE-2016-0671
-
Low
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50104)
CVE-2025-50104
CWE-400
Low
Moodle Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2012-1160)
CVE-2012-1160
CWE-732
Low
Oracle Database Server CVE-2009-1991 Vulnerability (CVE-2009-1991)
CVE-2009-1991
-
Low
Oracle Database Server CVE-2009-1972 Vulnerability (CVE-2009-1972)
CVE-2009-1972
-
Low
Oracle Database Server CVE-2009-1971 Vulnerability (CVE-2009-1971)
CVE-2009-1971
-
Low
Oracle Database Server CVE-2009-1969 Vulnerability (CVE-2009-1969)
CVE-2009-1969
-
Low
PrestaShop Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2025-51586)
CVE-2025-51586
CWE-359
Low
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1253)
CVE-2012-1253
CWE-707
Low
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1413)
CVE-2012-1413
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1844)
CVE-2009-1844
CWE-707
Low
Drupal Resource Management Errors Vulnerability (CVE-2012-1588)
CVE-2012-1588
-
Low
Oracle Database Server CVE-2022-21247 Vulnerability (CVE-2022-21247)
CVE-2022-21247
-
Low
ReviveAdserver Use of Externally-Controlled Format String Vulnerability (CVE-2025-52666)
CVE-2025-52666
CWE-134
Low
WebLogic CVE-2016-0688 Vulnerability (CVE-2016-0688)
CVE-2016-0688
-
Low
MySQL CVE-2016-0643 Vulnerability (CVE-2016-0643)
CVE-2016-0643
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1606)
CVE-2012-1606
CWE-707
Low
OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-23839)
CVE-2021-23839
CWE-327
Low
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1279)
CVE-2009-1279
CWE-707
Low
Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1613)
CVE-2012-1613
CWE-707
Low
Oracle Database Server Out-of-bounds Read Vulnerability (CVE-2025-53051)
CVE-2025-53051
CWE-125
Low
MySQL CVE-2016-0610 Vulnerability (CVE-2016-0610)
CVE-2016-0610
-
Low
MySQL CVE-2016-0609 Vulnerability (CVE-2016-0609)
CVE-2016-0609
-
Low
MySQL CVE-2016-0608 Vulnerability (CVE-2016-0608)
CVE-2016-0608
-
Low
MySQL CVE-2016-0607 Vulnerability (CVE-2016-0607)
CVE-2016-0607
-
Low
MySQL CVE-2016-0606 Vulnerability (CVE-2016-0606)
CVE-2016-0606
-
Low
MySQL CVE-2016-0605 Vulnerability (CVE-2016-0605)
CVE-2016-0605
-
Low
MySQL CVE-2016-0601 Vulnerability (CVE-2016-0601)
CVE-2016-0601
-
Low
MySQL CVE-2016-0600 Vulnerability (CVE-2016-0600)
CVE-2016-0600
-
Low
MySQL CVE-2025-50100 Vulnerability (CVE-2025-50100)
CVE-2025-50100
-
Low
MySQL CVE-2025-50098 Vulnerability (CVE-2025-50098)
CVE-2025-50098
-
Low
Oracle JRE CVE-2012-1717 Vulnerability (CVE-2012-1717)
CVE-2012-1717
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3629)
CVE-2009-3629
CWE-707
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0287)
CVE-2012-0287
CWE-707
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2947)
CVE-2016-2947
CWE-200
Low
MySQL CVE-2012-0492 Vulnerability (CVE-2012-0492)
CVE-2012-0492
-
Low
MySQL CVE-2012-0493 Vulnerability (CVE-2012-0493)
CVE-2012-0493
-
Low
MySQL CVE-2012-0494 Vulnerability (CVE-2012-0494)
CVE-2012-0494
-
Low
Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513)
CVE-2016-2513
CWE-200
Low
phpMyFAQ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-29196)
CVE-2024-29196
CWE-22
Low
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28566)
CVE-2021-28566
CWE-200
Low
Python Use After Free Vulnerability (CVE-2018-1000030)
CVE-2018-1000030
CWE-416
Low
TYPO3 Unverified Password Change Vulnerability (CVE-2025-47938)
CVE-2025-47938
CWE-620
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3891)
CVE-2009-3891
CWE-707
Low
Jetty Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-28163)
CVE-2021-28163
CWE-59
Low
Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2025-49005)
CVE-2025-49005
-
Low
Artifactory Incorrect Default Permissions Vulnerability (CVE-2021-46270)
CVE-2021-46270
CWE-276
Low
XWikiplatform Insufficient UI Warning of Dangerous Operations Vulnerability (CVE-2025-49583)
CVE-2025-49583
CWE-357
Low
Atlassian Jira CVE-2021-26076 Vulnerability (CVE-2021-26076)
CVE-2021-26076
-
Low
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0827)
CVE-2012-0827
CWE-264
Low
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0701)
CVE-2016-0701
CWE-200
Low
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0976)
CVE-2012-0976
CWE-707
Low
Moodle Incorrect Authorization Vulnerability (CVE-2022-0333)
CVE-2022-0333
CWE-863
Low
MySQL Improper Access Control Vulnerability (CVE-2025-50081)
CVE-2025-50081
CWE-284
Low
SharePoint CVE-2024-26251 Vulnerability (CVE-2024-26251)
CVE-2024-26251
-
Low
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2025-50066)
CVE-2025-50066
CWE-269
Low
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2009-3094)
CVE-2009-3094
CWE-476
Low
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1500)
CVE-2016-1500
CWE-200
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3156)
CVE-2009-3156
CWE-707
Low
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0800)
CVE-2012-0800
CWE-200
Low
Oracle Database Server CVE-2009-3410 Vulnerability (CVE-2009-3410)
CVE-2009-3410
-
Low
Oracle Application Server CVE-2009-3412 Vulnerability (CVE-2009-3412)
CVE-2009-3412
-
Low
Oracle Database Server CVE-2009-3413 Vulnerability (CVE-2009-3413)
CVE-2009-3413
-
Low
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3554)
CVE-2009-3554
CWE-200
Low
MySQL CVE-2016-0599 Vulnerability (CVE-2016-0599)
CVE-2016-0599
-
Low
MySQL CVE-2016-0598 Vulnerability (CVE-2016-0598)
CVE-2016-0598
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4370)
CVE-2009-4370
CWE-707
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4308)
CVE-2008-4308
CWE-200
Low
MySQL CVE-2024-21247 Vulnerability (CVE-2024-21247)
CVE-2024-21247
-
Low
MySQL CVE-2024-21244 Vulnerability (CVE-2024-21244)
CVE-2024-21244
-
Low
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5026)
CVE-2008-5026
CWE-707
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2025-61748)
CVE-2025-61748
CWE-284
Low