Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
Oracle JRE CVE-2014-0458 Vulnerability (CVE-2014-0458)
CVE-2014-0458
-
High
OpenSSL Other Vulnerability (CVE-2015-3194)
CVE-2015-3194
-
High
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3193)
CVE-2015-3193
CWE-200
High
Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2019-20406)
CVE-2019-20406
CWE-427
High
PHP DEPRECATED: Code Vulnerability (CVE-2014-9426)
CVE-2014-9426
-
High
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)
CVE-2019-18836
CWE-835
High
PostgreSQL Improper Access Control Vulnerability (CVE-2019-10128)
CVE-2019-10128
CWE-284
High
Drupal Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2020-36193)
CVE-2020-36193
CWE-59
High
WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36156)
CVE-2020-36156
CWE-269
High
Oracle Database Server CVE-2019-2518 Vulnerability (CVE-2019-2518)
CVE-2019-2518
-
High
PostgreSQL Improper Access Control Vulnerability (CVE-2019-10127)
CVE-2019-10127
CWE-284
High
WebLogic CVE-2021-2109 Vulnerability (CVE-2021-2109)
CVE-2021-2109
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)
CVE-2019-18838
CWE-476
High
Jboss EAP Incomplete List of Disallowed Inputs Vulnerability (CVE-2018-5968)
CVE-2018-5968
CWE-184
High
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2019-10097)
CVE-2019-10097
CWE-476
High
Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-6188)
CVE-2018-6188
CWE-200
High
OpenVPN AS Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2020-36382)
CVE-2020-36382
CWE-754
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-1257)
CVE-2019-1257
CWE-20
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27947)
CVE-2021-27947
CWE-138
High
Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)
CVE-2019-1010054
CWE-352
High
SharePoint CVE-2019-1201 Vulnerability (CVE-2019-1201)
CVE-2019-1201
-
High
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-8163)
CVE-2020-8163
CWE-94
High
Apache Tomcat Improper Locking Vulnerability (CVE-2019-10072)
CVE-2019-10072
CWE-667
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311)
CVE-2014-2311
CWE-138
High
MongoDb CVE-2019-2390 Vulnerability (CVE-2019-2390)
CVE-2019-2390
-
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1010123)
CVE-2019-1010123
CWE-434
High
MyBB CVE-2015-2352 Vulnerability (CVE-2015-2352)
CVE-2015-2352
-
High
Oracle JRE CVE-2014-2402 Vulnerability (CVE-2014-2402)
CVE-2014-2402
-
High
Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)
CVE-2019-2414
-
High
Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-9494)
CVE-2020-9494
CWE-119
High
Envoy Proxy Reachable Assertion Vulnerability (CVE-2021-29258)
CVE-2021-29258
CWE-617
High
Oracle Database Server CVE-2014-2406 Vulnerability (CVE-2014-2406)
CVE-2014-2406
-
High
Magento Incorrect Authorization Vulnerability (CVE-2020-9587)
CVE-2020-9587
CWE-863
High
Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-29053)
CVE-2021-29053
CWE-138
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-9490)
CVE-2020-9490
CWE-444
High
PHP Numeric Errors Vulnerability (CVE-2015-2331)
CVE-2015-2331
-
High
Magento Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-9588)
CVE-2020-9588
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2018-8011)
CVE-2018-8011
CWE-476
High
SharePoint CVE-2019-1205 Vulnerability (CVE-2019-1205)
CVE-2019-1205
-
High
ownCloud Other Vulnerability (CVE-2014-2055)
CVE-2014-2055
-
High
PHP Other Vulnerability (CVE-2015-2787)
CVE-2015-2787
-
High
ownCloud Other Vulnerability (CVE-2014-2056)
CVE-2014-2056
-
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-21339)
CVE-2021-21339
CWE-312
High
Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2020-8164)
CVE-2020-8164
CWE-502
High
WebLogic CVE-2021-2018 Vulnerability (CVE-2021-2018)
CVE-2021-2018
-
High
Jenkins CVE-2014-2063 Vulnerability (CVE-2014-2063)
CVE-2014-2063
-
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2019-10079)
CVE-2019-10079
CWE-20
High
WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)
CVE-2020-36518
CWE-787
High
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844)
CVE-2021-29844
CWE-918
High
Java Unspesificed Vulnerability (CVE-2018-2964)
CVE-2018-2964
-
High
SharePoint Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1261)
CVE-2019-1261
CWE-352
High
Oracle Database Server CVE-2019-2516 Vulnerability (CVE-2019-2516)
CVE-2019-2516
-
High
Telerik Web UI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2217)
CVE-2014-2217
CWE-22
High
Mailman Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2775)
CVE-2015-2775
CWE-22
High
MySQL CVE-2018-3064 Vulnerability (CVE-2018-3064)
CVE-2018-3064
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9427)
CVE-2014-9427
CWE-119
High
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-3719)
CVE-2020-3719
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9115)
CVE-2014-9115
CWE-138
High
IBM RTC Improper Privilege Management Vulnerability (CVE-2021-29774)
CVE-2021-29774
CWE-269
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3541)
CVE-2014-3541
CWE-94
High
PHP Out-of-bounds Read Vulnerability (CVE-2019-19246)
CVE-2019-19246
CWE-125
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-1296)
CVE-2019-1296
CWE-20
High
Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885)
CVE-2021-22885
CWE-209
High
Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2014-7143)
CVE-2014-7143
CWE-295
High
PHP Out-of-bounds Write Vulnerability (CVE-2020-7065)
CVE-2020-7065
CWE-787
High
Sqlite Other Vulnerability (CVE-2019-19959)
CVE-2019-19959
-
High
Ruby on Rails Other Vulnerability (CVE-2021-22904)
CVE-2021-22904
-
High
PHP Out-of-bounds Read Vulnerability (CVE-2020-7067)
CVE-2020-7067
CWE-125
High
Cherokee Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20798)
CVE-2019-20798
CWE-707
High
Ruby on Rails CVE-2021-22902 Vulnerability (CVE-2021-22902)
CVE-2021-22902
-
High
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2021-22880)
CVE-2021-22880
CWE-400
High
Joomla Cryptographic Issues Vulnerability (CVE-2014-7228)
CVE-2014-7228
-
High
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-5017)
CVE-2014-5017
CWE-138
High
Artifactory Improper Input Validation Vulnerability (CVE-2019-19937)
CVE-2019-19937
CWE-20
High
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-7226)
CVE-2020-7226
CWE-770
High