Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
XWikiplatform Insufficient UI Warning of Dangerous Operations Vulnerability (CVE-2025-49583)
CVE-2025-49583
CWE-357
Low
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2025-50066)
CVE-2025-50066
CWE-269
Low
MySQL Improper Access Control Vulnerability (CVE-2025-50081)
CVE-2025-50081
CWE-284
Low
MySQL CVE-2025-50098 Vulnerability (CVE-2025-50098)
CVE-2025-50098
-
Low
MySQL CVE-2025-50100 Vulnerability (CVE-2025-50100)
CVE-2025-50100
-
Low
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50104)
CVE-2025-50104
CWE-400
Low
PrestaShop Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2025-51586)
CVE-2025-51586
CWE-359
Low
ReviveAdserver Use of Externally-Controlled Format String Vulnerability (CVE-2025-52666)
CVE-2025-52666
CWE-134
Low
Oracle Database Server Out-of-bounds Read Vulnerability (CVE-2025-53051)
CVE-2025-53051
CWE-125
Low
Hiawatha CVE-2025-57784 Vulnerability (CVE-2025-57784)
CVE-2025-57784
-
Low
TYPO3 Uncaught Exception Vulnerability (CVE-2025-59014)
CVE-2025-59014
CWE-248
Low
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61634)
CVE-2025-61634
CWE-22
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2025-61748)
CVE-2025-61748
CWE-284
Low
Oracle Database Server Improper Access Control Vulnerability (CVE-2025-61749)
CVE-2025-61749
CWE-284
Low
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62184)
CVE-2025-62184
CWE-707
Low
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-67639)
CVE-2025-67639
CWE-352
Low
contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-107848)
CVE-2026-107848
CWE-352
Low
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-113593)
CVE-2026-113593
CWE-524
Low
Django Insufficiently Protected Credentials Vulnerability (CVE-2026-113733)
CVE-2026-113733
CWE-522
Low
Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-114719)
CVE-2026-114719
CWE-352
Low
Roundcube Incorrect Authorization Vulnerability (CVE-2026-114721)
CVE-2026-114721
CWE-863
Low
Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-114723)
CVE-2026-114723
CWE-770
Low
TornadoWebServer URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-116578)
CVE-2026-116578
CWE-601
Low
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-116687)
CVE-2026-116687
CWE-707
Low
Sqlite Incorrect Authorization Vulnerability (CVE-2026-119377)
CVE-2026-119377
CWE-863
Low
CakePHP Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-119415)
CVE-2026-119415
CWE-707
Low
CakePHP Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-119417)
CVE-2026-119417
CWE-707
Low
phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-119428)
CVE-2026-119428
CWE-918
Low
OpenCart Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-119558)
CVE-2026-119558
CWE-841
Low
PostgreSQL Untrusted Search Path Vulnerability (CVE-2026-14673)
CVE-2026-14673
CWE-426
Low
PostgreSQL Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-16241)
CVE-2026-16241
CWE-191
Low
Grafana Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-21725)
CVE-2026-21725
CWE-367
Low
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2026-21727)
CVE-2026-21727
CWE-732
Low
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-22007)
CVE-2026-22007
CWE-200
Low
Oracle JRE Execution with Unnecessary Privileges Vulnerability (CVE-2026-22008)
CVE-2026-22008
CWE-250
Low
Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-22018)
CVE-2026-22018
CWE-770
Low
Apache Tomcat CVE-2026-24733 Vulnerability (CVE-2026-24733)
CVE-2026-24733
-
Low
Django Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-25674)
CVE-2026-25674
CWE-362
Low
Grafana Improper Access Control Vulnerability (CVE-2026-28378)
CVE-2026-28378
CWE-284
Low
EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-33659)
CVE-2026-33659
CWE-367
Low
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-34094)
CVE-2026-34094
CWE-668
Low
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34268)
CVE-2026-34268
CWE-200
Low
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-34312)
CVE-2026-34312
CWE-284
Low
OpenSSL Expected Behavior Violation Vulnerability (CVE-2026-35191)
CVE-2026-35191
CWE-440
Low
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-35193)
CVE-2026-35193
CWE-524
Low
CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-35496)
CVE-2026-35496
CWE-22
Low
Roundcube Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2026-35538)
CVE-2026-35538
CWE-707
Low
axios Improper Encoding or Escaping of Output Vulnerability (CVE-2026-42040)
CVE-2026-42040
CWE-116
Low
OpenSSL Covert Channel Vulnerability (CVE-2026-42768)
CVE-2026-42768
CWE-514
Low
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-42770)
CVE-2026-42770
CWE-325
Low
Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)
CVE-2026-43514
CWE-208
Low
Next.js Use of Weak Hash Vulnerability (CVE-2026-44582)
CVE-2026-44582
-
Low
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-45485)
CVE-2026-45485
CWE-125
Low
Caddy Web Server Partial String Comparison Vulnerability (CVE-2026-45692)
CVE-2026-45692
CWE-187
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47010)
CVE-2026-47010
CWE-284
Low
Oracle Database Server Missing Authentication for Critical Function Vulnerability (CVE-2026-47038)
CVE-2026-47038
CWE-306
Low
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47059)
CVE-2026-47059
CWE-284
Low
Django Missing Authorization Vulnerability (CVE-2026-4292)
CVE-2026-4292
CWE-862
Low
Python Improper Input Validation Vulnerability (CVE-2026-4519)
CVE-2026-4519
CWE-20
Low
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4874)
CVE-2026-4874
CWE-918
Low
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-53575)
CVE-2026-53575
CWE-707
Low
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54872)
CVE-2026-54872
CWE-208
Low
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-54875)
CVE-2026-54875
CWE-208
Low
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-55035)
CVE-2026-55035
CWE-125
Low
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55184)
CVE-2026-55184
CWE-707
Low
Drupal Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55807)
CVE-2026-55807
CWE-918
Low
PostgreSQL Incorrect Ownership Assignment Vulnerability (CVE-2026-6469)
CVE-2026-6469
CWE-708
Low
OpenSSL Observable Timing Discrepancy Vulnerability (CVE-2026-77696)
CVE-2026-77696
CWE-208
Low
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-7666)
CVE-2026-7666
CWE-319
Low
Coppermine Cross Site Scripting Vulnerability (CVE-2026-82482)
CVE-2026-82482
-
Low
NextJsReactFramework Origin Validation Error Vulnerability (CVE-2026-94486)
CVE-2026-94486
CWE-346
Low
Oracle JRE CVE-2012-0547 Vulnerability (CVE-2012-0547)
CVE-2012-0547
-
Information
Oracle JRE Other Vulnerability (CVE-2012-5085)
CVE-2012-5085
-
Information