Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15302 vulnerabilities in this category.

Critical: 1663 High: 4122 Medium: 8726 Low: 789 Information: 2
Vulnerability Name
CVE
CWE
Severity
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61634)
CVE-2025-61634
CWE-22
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3396)
CVE-2012-3396
CWE-707
Low
MySQL CVE-2022-21321 Vulnerability (CVE-2022-21321)
CVE-2022-21321
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3393)
CVE-2012-3393
CWE-707
Low
MySQL CVE-2022-21320 Vulnerability (CVE-2022-21320)
CVE-2022-21320
-
Low
MySQL CVE-2022-21319 Vulnerability (CVE-2022-21319)
CVE-2022-21319
-
Low
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3390)
CVE-2012-3390
CWE-264
Low
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6421)
CVE-2007-6421
CWE-707
Low
MySQL CVE-2022-21485 Vulnerability (CVE-2022-21485)
CVE-2022-21485
-
Low
MySQL CVE-2015-2576 Vulnerability (CVE-2015-2576)
CVE-2015-2576
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3178)
CVE-2015-3178
CWE-707
Low
MySQL CVE-2015-4737 Vulnerability (CVE-2015-4737)
CVE-2015-4737
-
Low
Oracle JRE CVE-2012-5077 Vulnerability (CVE-2012-5077)
CVE-2012-5077
-
Low
XWiki CVE-2007-4898 Vulnerability (CVE-2007-4898)
CVE-2007-4898
-
Low
MySQL CVE-2012-5096 Vulnerability (CVE-2012-5096)
CVE-2012-5096
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5339)
CVE-2012-5339
CWE-707
Low
OpenSSL Cryptographic Issues Vulnerability (CVE-2015-4000)
CVE-2015-4000
-
Low
Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2015-3921)
CVE-2015-3921
-
Low
WordPress Other Vulnerability (CVE-2007-4153)
CVE-2007-4153
-
Low
Squid Improper Input Validation Vulnerability (CVE-2015-3455)
CVE-2015-3455
CWE-20
Low
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5502)
CVE-2012-5502
CWE-707
Low
Dotclear Other Vulnerability (CVE-2007-3688)
CVE-2007-3688
-
Low
PHP-Fusion Other Vulnerability (CVE-2007-3559)
CVE-2007-3559
-
Low
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3179)
CVE-2015-3179
CWE-264
Low
Moodle DEPRECATED: Code Vulnerability (CVE-2015-3177)
CVE-2015-3177
-
Low
MySQL CVE-2022-21486 Vulnerability (CVE-2022-21486)
CVE-2022-21486
-
Low
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3174)
CVE-2015-3174
CWE-707
Low
OpenSSL Other Vulnerability (CVE-2007-3108)
CVE-2007-3108
-
Low
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5868)
CVE-2012-5868
CWE-200
Low
PHP Other Vulnerability (CVE-2007-2727)
CVE-2007-2727
-
Low
MySQL Other Vulnerability (CVE-2007-2693)
CVE-2007-2693
-
Low
PHP Improper Input Validation Vulnerability (CVE-2007-2509)
CVE-2007-2509
CWE-20
Low
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-2450)
CVE-2007-2450
CWE-707
Low
MySQL CVE-2015-2661 Vulnerability (CVE-2015-2661)
CVE-2015-2661
-
Low
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6074)
CVE-2012-6074
CWE-707
Low
MySQL CVE-2015-2641 Vulnerability (CVE-2015-2641)
CVE-2015-2641
-
Low
MySQL CVE-2015-2639 Vulnerability (CVE-2015-2639)
CVE-2015-2639
-
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-24728)
CVE-2022-24728
CWE-707
Low
Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585)
CVE-2015-2585
-
Low
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-2922)
CVE-2020-2922
CWE-200
Low
WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4049)
CVE-2020-4049
CWE-707
Low
WordPress Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2020-4050)
CVE-2020-4050
CWE-288
Low
Oracle Database Server CVE-2015-4753 Vulnerability (CVE-2015-4753)
CVE-2015-4753
-
Low
MySQL CVE-2015-4771 Vulnerability (CVE-2015-4771)
CVE-2015-4771
-
Low
MySQL CVE-2015-4861 Vulnerability (CVE-2015-4861)
CVE-2015-4861
-
Low
MySQL Other Vulnerability (CVE-2007-6303)
CVE-2007-6303
-
Low
Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534)
CVE-2012-4534
-
Low
MySQL CVE-2015-4836 Vulnerability (CVE-2015-4836)
CVE-2015-4836
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6100)
CVE-2007-6100
CWE-707
Low
PHP Improper Input Validation Vulnerability (CVE-2007-6039)
CVE-2007-6039
CWE-20
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5977)
CVE-2007-5977
CWE-707
Low
MySQL CVE-2018-3066 Vulnerability (CVE-2018-3066)
CVE-2018-3066
-
Low
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4579)
CVE-2012-4579
CWE-707
Low
MySQL CVE-2015-4807 Vulnerability (CVE-2015-4807)
CVE-2015-4807
-
Low
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5710)
CVE-2007-5710
CWE-707
Low
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5621)
CVE-2007-5621
CWE-707
Low
MySQL CVE-2015-4792 Vulnerability (CVE-2015-4792)
CVE-2015-4792
-
Low
MySQL CVE-2015-4791 Vulnerability (CVE-2015-4791)
CVE-2015-4791
-
Low
Vanilla Forums Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4954)
CVE-2012-4954
CWE-264
Low
Oracle JRE CVE-2022-21624 Vulnerability (CVE-2022-21624)
CVE-2022-21624
-
Low
MySQL CVE-2018-3082 Vulnerability (CVE-2018-3082)
CVE-2018-3082
-
Low
Oracle JRE CVE-2022-21619 Vulnerability (CVE-2022-21619)
CVE-2022-21619
-
Low
Java Unspesificed Vulnerability (CVE-2018-3157)
CVE-2018-3157
-
Low
Java Unspesificed Vulnerability (CVE-2018-3150)
CVE-2018-3150
-
Low
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-67639)
CVE-2025-67639
CWE-352
Low
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-5461)
CVE-2007-5461
CWE-22
Low
MySQL CVE-2015-4757 Vulnerability (CVE-2015-4757)
CVE-2015-4757
-
Low
MySQL CVE-2015-4761 Vulnerability (CVE-2015-4761)
CVE-2015-4761
-
Low
Java Unspesificed Vulnerability (CVE-2018-3139)
CVE-2018-3139
-
Low
MySQL CVE-2015-4766 Vulnerability (CVE-2015-4766)
CVE-2015-4766
-
Low
Java Unspesificed Vulnerability (CVE-2018-3136)
CVE-2018-3136
-
Low
MySQL CVE-2015-4767 Vulnerability (CVE-2015-4767)
CVE-2015-4767
-
Low
MySQL CVE-2015-4769 Vulnerability (CVE-2015-4769)
CVE-2015-4769
-
Low
MySQL CVE-2018-3084 Vulnerability (CVE-2018-3084)
CVE-2018-3084
-
Low
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4572)
CVE-2012-4572
CWE-264
Low