Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Oracle Database Server Improper Access Control Vulnerability (CVE-2025-61749)
CVE-2025-61749
CWE-284
Low
MySQL CVE-2024-21243 Vulnerability (CVE-2024-21243)
CVE-2024-21243
-
Low
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62184)
CVE-2025-62184
CWE-707
Low
MySQL CVE-2024-21237 Vulnerability (CVE-2024-21237)
CVE-2024-21237
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-4775)
CVE-2008-4775
CWE-707
Low
MySQL CVE-2022-21372 Vulnerability (CVE-2022-21372)
CVE-2022-21372
-
Low
MySQL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-4456)
CVE-2008-4456
CWE-707
Low
MySQL CVE-2024-21232 Vulnerability (CVE-2024-21232)
CVE-2024-21232
-
Low
MySQL CVE-2024-21231 Vulnerability (CVE-2024-21231)
CVE-2024-21231
-
Low
Oracle Database Server CVE-2012-3146 Vulnerability (CVE-2012-3146)
CVE-2012-3146
-
Low
MySQL CVE-2012-3149 Vulnerability (CVE-2012-3149)
CVE-2012-3149
-
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5250)
CVE-2008-5250
CWE-707
Low
Oracle JRE CVE-2024-21217 Vulnerability (CVE-2024-21217)
CVE-2024-21217
-
Low
Ruby on Rails 7PK - Security Features Vulnerability (CVE-2015-7576)
CVE-2015-7576
-
Low
Oracle Database Server CVE-2012-3151 Vulnerability (CVE-2012-3151)
CVE-2012-3151
-
Low
Oracle JRE Insecure Storage of Sensitive Information Vulnerability (CVE-2024-21211)
CVE-2024-21211
CWE-922
Low
Oracle JRE Observable Discrepancy Vulnerability (CVE-2024-21210)
CVE-2024-21210
CWE-203
Low
MySQL CVE-2024-21209 Vulnerability (CVE-2024-21209)
CVE-2024-21209
-
Low
Oracle JRE Observable Discrepancy Vulnerability (CVE-2024-21208)
CVE-2024-21208
CWE-203
Low
MySQL CVE-2012-3156 Vulnerability (CVE-2012-3156)
CVE-2012-3156
-
Low
Oracle Application Server CVE-2008-3987 Vulnerability (CVE-2008-3987)
CVE-2008-3987
-
Low
Oracle Application Server CVE-2008-3986 Vulnerability (CVE-2008-3986)
CVE-2008-3986
-
Low
MySQL CVE-2012-3160 Vulnerability (CVE-2012-3160)
CVE-2012-3160
-
Low
MySQL CVE-2012-3167 Vulnerability (CVE-2012-3167)
CVE-2012-3167
-
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449)
CVE-2015-7449
CWE-200
Low
MySQL CVE-2012-3197 Vulnerability (CVE-2012-3197)
CVE-2012-3197
-
Low
Oracle Database Server CVE-2024-21251 Vulnerability (CVE-2024-21251)
CVE-2024-21251
-
Low
IBM WebSEAL Session Fixation Vulnerability (CVE-2018-1804)
CVE-2018-1804
CWE-384
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372)
CVE-2016-0372
CWE-200
Low
MySQL CVE-2022-21325 Vulnerability (CVE-2022-21325)
CVE-2022-21325
-
Low
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2009-0754)
CVE-2009-0754
CWE-134
Low
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0737)
CVE-2009-0737
CWE-707
Low
OpenSSL Improper Authentication Vulnerability (CVE-2009-0591)
CVE-2009-0591
CWE-287
Low
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2102)
CVE-2012-2102
CWE-119
Low
Caddy Web Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19148)
CVE-2018-19148
CWE-200
Low
MySQL CVE-2022-21311 Vulnerability (CVE-2022-21311)
CVE-2022-21311
-
Low
MySQL CVE-2022-21312 Vulnerability (CVE-2022-21312)
CVE-2022-21312
-
Low
Hiawatha CVE-2025-57784 Vulnerability (CVE-2025-57784)
CVE-2025-57784
-
Low
MySQL CVE-2022-21319 Vulnerability (CVE-2022-21319)
CVE-2022-21319
-
Low
MySQL CVE-2022-21320 Vulnerability (CVE-2022-21320)
CVE-2022-21320
-
Low
MySQL CVE-2022-21321 Vulnerability (CVE-2022-21321)
CVE-2022-21321
-
Low
MySQL CVE-2022-21323 Vulnerability (CVE-2022-21323)
CVE-2022-21323
-
Low
MySQL CVE-2022-21324 Vulnerability (CVE-2022-21324 )
CVE-2022-21324
-
Low
TYPO3 Uncaught Exception Vulnerability (CVE-2025-59014)
CVE-2025-59014
CWE-248
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2360)
CVE-2012-2360
CWE-707
Low
MediaWiki Improper Access Control Vulnerability (CVE-2015-8001)
CVE-2015-8001
CWE-284
Low
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5814)
CVE-2008-5814
CWE-707
Low
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61634)
CVE-2025-61634
CWE-22
Low
MySQL CVE-2022-21357 Vulnerability (CVE-2022-21357)
CVE-2022-21357
-
Low
MySQL CVE-2022-21355 Vulnerability (CVE-2022-21355)
CVE-2022-21355
-
Low
Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8105)
CVE-2015-8105
-
Low
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)
CVE-2008-5519
CWE-200
Low
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687)
CVE-2012-2687
CWE-707
Low
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8481)
CVE-2015-8481
CWE-200
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2361)
CVE-2012-2361
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6170)
CVE-2008-6170
CWE-707
Low
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6299)
CVE-2008-6299
CWE-707
Low
MySQL CVE-2022-21333 Vulnerability (CVE-2022-21333)
CVE-2022-21333
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2365)
CVE-2012-2365
CWE-707
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2364)
CVE-2012-2364
CWE-707
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2362)
CVE-2012-2362
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4369)
CVE-2009-4369
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4371)
CVE-2009-4371
CWE-707
Low
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2150)
CVE-2013-2150
CWE-707
Low
MySQL CVE-2016-8284 Vulnerability (CVE-2016-8284)
CVE-2016-8284
-
Low
PHP Interpretation Conflict Vulnerability (CVE-2025-1217)
CVE-2025-1217
CWE-436
Low
ReviveAdserver Other Vulnerability (CVE-2016-9471)
CVE-2016-9471
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5100)
CVE-2010-5100
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5098)
CVE-2010-5098
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5097)
CVE-2010-5097
CWE-707
Low
silverstripeCMS Credentials Management Errors Vulnerability (CVE-2010-5092)
CVE-2010-5092
-
Low
Oracle Database Server CVE-2011-3511 Vulnerability (CVE-2011-3511)
CVE-2011-3511
-
Low
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4883)
CVE-2010-4883
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3591)
CVE-2011-3591
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3592)
CVE-2011-3592
CWE-707
Low