Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15302 vulnerabilities in this category.

Critical: 1663 High: 4122 Medium: 8726 Low: 789 Information: 2
Vulnerability Name
CVE
CWE
Severity
Oracle Application Server CVE-2006-3707 Vulnerability (CVE-2006-3707)
CVE-2006-3707
-
Low
LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16183)
CVE-2019-16183
CWE-276
Low
LimeSurvey CVE-2019-16181 Vulnerability (CVE-2019-16181)
CVE-2019-16181
-
Low
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1835)
CVE-2013-1835
CWE-200
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-1833)
CVE-2013-1833
CWE-707
Low
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-1822)
CVE-2013-1822
CWE-707
Low
PHP Numeric Errors Vulnerability (CVE-2006-4486)
CVE-2006-4486
-
Low
MySQL Other Vulnerability (CVE-2006-4226)
CVE-2006-4226
-
Low
MySQL CVE-2013-1567 Vulnerability (CVE-2013-1567)
CVE-2013-1567
-
Low
Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28838)
CVE-2020-28838
CWE-352
Low
MySQL CVE-2013-1566 Vulnerability (CVE-2013-1566)
CVE-2013-1566
-
Low
Oracle Database Server CVE-2015-0370 Vulnerability (CVE-2015-0370)
CVE-2015-0370
-
Low
PHP Other Vulnerability (CVE-2006-4484)
CVE-2006-4484
-
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6145)
CVE-2012-6145
CWE-707
Low
Grafana Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-21725)
CVE-2026-21725
CWE-367
Low
MySQL CVE-2012-3149 Vulnerability (CVE-2012-3149)
CVE-2012-3149
-
Low
MySQL CVE-2018-2767 Vulnerability (CVE-2018-2767)
CVE-2018-2767
-
Low
MySQL CVE-2022-21333 Vulnerability (CVE-2022-21333)
CVE-2022-21333
-
Low
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1924)
CVE-2008-1924
CWE-200
Low
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3507)
CVE-2012-3507
CWE-707
Low
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3528)
CVE-2012-3528
CWE-707
Low
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3529)
CVE-2012-3529
CWE-200
Low
Moodle CVE-2023-5551 Vulnerability (CVE-2023-5551)
CVE-2023-5551
-
Low
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3952)
CVE-2012-3952
CWE-707
Low
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5304)
CVE-2015-5304
CWE-264
Low
PHP Use After Free Vulnerability (CVE-2020-7068)
CVE-2020-7068
CWE-416
Low
Moodle CVE-2023-5543 Vulnerability (CVE-2023-5543)
CVE-2023-5543
-
Low
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4238)
CVE-2012-4238
CWE-707
Low
MySQL CVE-2022-21355 Vulnerability (CVE-2022-21355)
CVE-2022-21355
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1131)
CVE-2008-1131
CWE-707
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4345)
CVE-2012-4345
CWE-707
Low
MySQL CVE-2022-21357 Vulnerability (CVE-2022-21357)
CVE-2022-21357
-
Low
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3427)
CVE-2012-3427
CWE-264
Low
MySQL CVE-2022-21372 Vulnerability (CVE-2022-21372)
CVE-2022-21372
-
Low
Apache HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2008-0456)
CVE-2008-0456
CWE-138
Low
Oracle JRE CVE-2018-2790 Vulnerability (CVE-2018-2790)
CVE-2018-2790
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0274)
CVE-2008-0274
CWE-707
Low
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-4962)
CVE-2015-4962
CWE-200
Low
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946)
CVE-2015-4946
CWE-264
Low
MySQL CVE-2015-4913 Vulnerability (CVE-2015-4913)
CVE-2015-4913
-
Low
MySQL CVE-2015-4910 Vulnerability (CVE-2015-4910)
CVE-2015-4910
-
Low
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4422)
CVE-2012-4422
CWE-264
Low
MySQL CVE-2015-4895 Vulnerability (CVE-2015-4895)
CVE-2015-4895
-
Low
MySQL CVE-2015-4890 Vulnerability (CVE-2015-4890)
CVE-2015-4890
-
Low
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4452)
CVE-2012-4452
CWE-264
Low
Java Denial of Service (DoS) Vulnerability (CVE-2018-2952)
CVE-2018-2952
-
Low
MySQL CVE-2015-4864 Vulnerability (CVE-2015-4864)
CVE-2015-4864
-
Low
PHP Other Vulnerability (CVE-2012-3450)
CVE-2012-3450
-
Low
Oracle JRE CVE-2018-2579 Vulnerability (CVE-2018-2579)
CVE-2018-2579
-
Low
MySQL CVE-2022-21484 Vulnerability (CVE-2022-21484)
CVE-2022-21484
-
Low
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)
CVE-2012-3383
CWE-264
Low
WebLogic Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-8908)
CVE-2020-8908
CWE-732
Low
Oracle Database Server CVE-2012-3151 Vulnerability (CVE-2012-3151)
CVE-2012-3151
-
Low
MySQL CVE-2012-3156 Vulnerability (CVE-2012-3156)
CVE-2012-3156
-
Low
MySQL CVE-2012-3160 Vulnerability (CVE-2012-3160)
CVE-2012-3160
-
Low
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3197)
CVE-2008-3197
CWE-352
Low
MySQL CVE-2012-3167 Vulnerability (CVE-2012-3167)
CVE-2012-3167
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2960)
CVE-2008-2960
CWE-707
Low
PostgreSQL Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-10977)
CVE-2024-10977
CWE-345
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5622)
CVE-2015-5622
CWE-707
Low
MySQL CVE-2012-3197 Vulnerability (CVE-2012-3197)
CVE-2012-3197
-
Low
Grafana Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-10452)
CVE-2024-10452
CWE-639
Low
Oracle JRE CVE-2012-3216 Vulnerability (CVE-2012-3216)
CVE-2012-3216
-
Low
MySQL CVE-2022-21311 Vulnerability (CVE-2022-21311)
CVE-2022-21311
-
Low
MySQL CVE-2022-21312 Vulnerability (CVE-2022-21312)
CVE-2022-21312
-
Low
Oracle Application Server CVE-2008-2619 Vulnerability (CVE-2008-2619)
CVE-2008-2619
-
Low
MySQL CVE-2022-21325 Vulnerability (CVE-2022-21325)
CVE-2022-21325
-
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2025-61748)
CVE-2025-61748
CWE-284
Low
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62184)
CVE-2025-62184
CWE-707
Low
Oracle Database Server CVE-2008-2587 Vulnerability (CVE-2008-2587)
CVE-2008-2587
-
Low
Oracle Database Server CVE-2018-2575 Vulnerability (CVE-2018-2575)
CVE-2018-2575
-
Low
Oracle Database Server CVE-2008-2590 Vulnerability (CVE-2008-2590)
CVE-2008-2590
-
Low
MySQL CVE-2022-21324 Vulnerability (CVE-2022-21324 )
CVE-2022-21324
-
Low
Oracle Database Server Improper Access Control Vulnerability (CVE-2025-61749)
CVE-2025-61749
CWE-284
Low
MySQL CVE-2022-21323 Vulnerability (CVE-2022-21323)
CVE-2022-21323
-
Low