Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5769)
CVE-2016-5769
CWE-190
Critical
PHP Use After Free Vulnerability (CVE-2016-5771)
CVE-2016-5771
CWE-416
Critical
Pega Infinity Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-10094)
CVE-2024-10094
CWE-94
Critical
PHP Improper Encoding or Escaping of Output Vulnerability (CVE-2024-1874)
CVE-2024-1874
CWE-116
Critical
PHP Double Free Vulnerability (CVE-2016-5772)
CVE-2016-5772
CWE-415
Critical
PHP Use After Free Vulnerability (CVE-2016-5773)
CVE-2016-5773
CWE-416
Critical
Oracle Database Server CVE-2007-5531 Vulnerability (CVE-2007-5531)
CVE-2007-5531
-
Critical
Oracle Database Server CVE-2007-5530 Vulnerability (CVE-2007-5530)
CVE-2007-5530
-
Critical
Oracle Application Server CVE-2007-5526 Vulnerability (CVE-2007-5526)
CVE-2007-5526
-
Critical
Python Incorrect Authorization Vulnerability (CVE-2020-15801)
CVE-2020-15801
CWE-863
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6288)
CVE-2016-6288
CWE-119
Critical
PHP Use After Free Vulnerability (CVE-2016-6290)
CVE-2016-6290
CWE-416
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6291)
CVE-2016-6291
CWE-119
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2016-6294)
CVE-2016-6294
CWE-125
Critical
PHP Use After Free Vulnerability (CVE-2016-6295)
CVE-2016-6295
CWE-416
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6296)
CVE-2016-6296
CWE-119
Critical
GlassFish CVE-2016-5528 Vulnerability (CVE-2016-5528)
CVE-2016-5528
-
Critical
SharePoint CVE-2020-17118 Vulnerability (CVE-2020-17118)
CVE-2020-17118
-
Critical
Oracle Database Server CVE-2008-0349 Vulnerability (CVE-2008-0349)
CVE-2008-0349
-
Critical
Oracle Database Server CVE-2008-0342 Vulnerability (CVE-2008-0342)
CVE-2008-0342
-
Critical
Oracle Application Server CVE-2008-0349 Vulnerability (CVE-2008-0349)
CVE-2008-0349
-
Critical
Oracle Application Server CVE-2008-0348 Vulnerability (CVE-2008-0348)
CVE-2008-0348
-
Critical
Oracle Database Server CVE-2008-0348 Vulnerability (CVE-2008-0348)
CVE-2008-0348
-
Critical
Oracle Database Server CVE-2008-0347 Vulnerability (CVE-2008-0347)
CVE-2008-0347
-
Critical
Oracle Application Server CVE-2008-0347 Vulnerability (CVE-2008-0347)
CVE-2008-0347
-
Critical
Oracle Database Server CVE-2008-0346 Vulnerability (CVE-2008-0346)
CVE-2008-0346
-
Critical
Oracle Application Server CVE-2008-0346 Vulnerability (CVE-2008-0346)
CVE-2008-0346
-
Critical
Oracle Database Server CVE-2008-0345 Vulnerability (CVE-2008-0345)
CVE-2008-0345
-
Critical
Oracle Application Server CVE-2008-0345 Vulnerability (CVE-2008-0345)
CVE-2008-0345
-
Critical
Oracle Database Server CVE-2008-0344 Vulnerability (CVE-2008-0344)
CVE-2008-0344
-
Critical
Oracle Application Server CVE-2008-0344 Vulnerability (CVE-2008-0344)
CVE-2008-0344
-
Critical
Oracle Database Server CVE-2008-0343 Vulnerability (CVE-2008-0343)
CVE-2008-0343
-
Critical
Oracle Application Server CVE-2008-0343 Vulnerability (CVE-2008-0343)
CVE-2008-0343
-
Critical
Oracle Database Server CVE-2008-0341 Vulnerability (CVE-2008-0341)
CVE-2008-0341
-
Critical
Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2023-7104)
CVE-2023-7104
CWE-119
Critical
Oracle Application Server CVE-2008-0340 Vulnerability (CVE-2008-0340)
CVE-2008-0340
-
Critical
Oracle Database Server CVE-2008-0340 Vulnerability (CVE-2008-0340)
CVE-2008-0340
-
Critical
Oracle Database Server CVE-2008-0339 Vulnerability (CVE-2008-0339)
CVE-2008-0339
-
Critical
Jetty Improper Access Control Vulnerability (CVE-2016-4800)
CVE-2016-4800
CWE-284
Critical
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19213)
CVE-2020-19213
CWE-138
Critical
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-19138)
CVE-2020-19138
CWE-434
Critical
Jboss EAP CVE-2016-5018 Vulnerability (CVE-2016-5018)
CVE-2016-5018
-
Critical
Wordpress Plugin Backup Migration CVE-2023-6553 Vulnerability (CVE-2023-6553)
CVE-2023-6553
-
Critical
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-6579)
CVE-2023-6579
CWE-138
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-5114)
CVE-2016-5114
CWE-119
Critical
Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-0075)
CVE-2008-0075
CWE-94
Critical
Wordpress Plugin Backup Migration Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2023-6971)
CVE-2023-6971
CWE-829
Critical
Wordpress Plugin Backup Migration Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-6972)
CVE-2023-6972
CWE-22
Critical
Ruby Other Vulnerability (CVE-2016-2336)
CVE-2016-2336
-
Critical
Perl Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-47100)
CVE-2023-47100
CWE-755
Critical
OpenSSL Use After Free Vulnerability (CVE-2016-6309)
CVE-2016-6309
CWE-416
Critical
Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834)
CVE-2023-40834
CWE-307
Critical
WordPress CVE-2020-28039 Vulnerability (CVE-2020-28039)
CVE-2020-28039
-
Critical
WordPress Improper Input Validation Vulnerability (CVE-2020-28037)
CVE-2020-28037
CWE-20
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2023-3824)
CVE-2023-3824
CWE-119
Critical
WordPress Improper Privilege Management Vulnerability (CVE-2020-28036)
CVE-2020-28036
CWE-269
Critical
WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)
CVE-2020-28035
CWE-269
Critical
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-28032)
CVE-2020-28032
CWE-502
Critical
osCommerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-27976)
CVE-2020-27976
CWE-138
Critical
MediaWiki Credentials Management Errors Vulnerability (CVE-2015-8009)
CVE-2015-8009
-
Critical
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2015-8103)
CVE-2015-8103
CWE-502
Critical
ZenCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-8352)
CVE-2015-8352
CWE-22
Critical
Grafana Signature Verification Vulnerability (CVE-2020-27846)
CVE-2020-27846
-
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8383)
CVE-2015-8383
CWE-119
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8386)
CVE-2015-8386
CWE-119
Critical
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-3550)
CVE-2023-3550
CWE-707
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8389)
CVE-2015-8389
CWE-119
Critical
PHP Use of Uninitialized Resource Vulnerability (CVE-2015-8390)
CVE-2015-8390
CWE-908
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8391)
CVE-2015-8391
CWE-119
Critical
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8394)
CVE-2015-8394
CWE-190
Critical
Python CVE-2020-27619 Vulnerability (CVE-2020-27619)
CVE-2020-27619
-
Critical
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41892)
CVE-2023-41892
CWE-94
Critical
Perl Out-of-bounds Read Vulnerability (CVE-2015-8608)
CVE-2015-8608
CWE-125
Critical
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2015-8617)
CVE-2015-8617
CWE-134
Critical
TYPO3 Improper Input Validation Vulnerability (CVE-2009-0258)
CVE-2009-0258
CWE-20
Critical