Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
Lighttpd Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2323)
CVE-2014-2323
CWE-138
Critical
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-16943)
CVE-2019-16943
CWE-502
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60199)
CVE-2026-60199
CWE-306
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16942)
CVE-2019-16942
CWE-502
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60200)
CVE-2026-60200
CWE-306
Critical
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29201)
CVE-2023-29201
CWE-707
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-2091)
CVE-2013-2091
CWE-138
Critical
SharePoint CVE-2023-29357 Vulnerability (CVE-2023-29357)
CVE-2023-29357
-
Critical
PrestaShop Improper Authentication Vulnerability (CVE-2020-4074)
CVE-2020-4074
CWE-287
Critical
Oracle JRE CVE-2013-5846 Vulnerability (CVE-2013-5846)
CVE-2013-5846
-
Critical
Apache Tomcat Insufficient Technical Documentation Vulnerability (CVE-2026-59084)
CVE-2026-59084
-
Critical
Magento CVE-2020-3718 Vulnerability (CVE-2020-3718)
CVE-2020-3718
-
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60202)
CVE-2026-60202
CWE-306
Critical
Microsoft SQL Server Other Vulnerability (CVE-2002-0721)
CVE-2002-0721
-
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17267)
CVE-2019-17267
CWE-502
Critical
Apache Tomcat Improper Handling of URL Encoding (Hex Encoding) Vulnerability (CVE-2026-59083)
CVE-2026-59083
CWE-177
Critical
MyBB CVE-2011-5133 Vulnerability (CVE-2011-5133)
CVE-2011-5133
-
Critical
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)
CVE-2019-17531
CWE-502
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)
CVE-2019-17531
CWE-502
Critical
Oracle JRE CVE-2013-5844 Vulnerability (CVE-2013-5844)
CVE-2013-5844
-
Critical
Artifactory Weak Password Requirements Vulnerability (CVE-2019-17444)
CVE-2019-17444
CWE-521
Critical
MediaWiki CVE-2023-29141 Vulnerability (CVE-2023-29141)
CVE-2023-29141
-
Critical
WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-17195)
CVE-2019-17195
CWE-754
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-16943)
CVE-2019-16943
CWE-502
Critical
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)
CVE-2023-3171
CWE-770
High
WordPress Other Vulnerability (CVE-2016-2222)
CVE-2016-2222
-
High
Undertow CVE-2023-3223 Vulnerability (CVE-2023-3223)
CVE-2023-3223
-
High
WordPress Other Vulnerability (CVE-2016-2221)
CVE-2016-2221
-
High
PostgreSQL 7PK - Security Features Vulnerability (CVE-2016-2193)
CVE-2016-2193
-
High
Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)
CVE-2016-2183
CWE-200
High
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3834)
CVE-2014-3834
CWE-264
High
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)
CVE-2012-6707
CWE-326
High
Jboss EAP CVE-2023-3223 Vulnerability (CVE-2023-3223)
CVE-2023-3223
-
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8387)
CVE-2015-8387
CWE-190
High
Squid NULL Pointer Dereference Vulnerability (CVE-2023-46728)
CVE-2023-46728
CWE-476
High
MySQL CVE-2023-22102 Vulnerability (CVE-2023-22102)
CVE-2023-22102
-
High
Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)
CVE-2023-46724
CWE-295
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2021-4104)
CVE-2021-4104
CWE-502
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2311)
CVE-2014-2311
CWE-138
High
MediaWiki Improper Access Control Vulnerability (CVE-2015-8008)
CVE-2015-8008
CWE-284
High
Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-48566)
CVE-2022-48566
CWE-362
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2023-39456)
CVE-2023-39456
CWE-20
High
Oracle JRE CVE-2014-2428 Vulnerability (CVE-2014-2428)
CVE-2014-2428
-
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7857)
CVE-2015-7857
CWE-138
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7858)
CVE-2015-7858
CWE-138
High
MongoDb Improper Authentication Vulnerability (CVE-2015-7882)
CVE-2015-7882
CWE-287
High
MySQL CVE-2022-21351 Vulnerability (CVE-2022-21351)
CVE-2022-21351
-
High
phpMyFAQ Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-4409)
CVE-2022-4409
CWE-319
High
CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8379)
CVE-2015-8379
CWE-352
High
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46816)
CVE-2023-46816
CWE-94
High
Oracle JRE CVE-2014-0458 Vulnerability (CVE-2014-0458)
CVE-2014-0458
-
High
Oracle Database Server CVE-2014-2406 Vulnerability (CVE-2014-2406)
CVE-2014-2406
-
High
PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39528)
CVE-2023-39528
CWE-22
High
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-46815)
CVE-2023-46815
CWE-434
High
OpenSSL Double Free Vulnerability (CVE-2022-4450)
CVE-2022-4450
CWE-415
High
MathJax Inefficient Regular Expression Complexity Vulnerability (CVE-2023-39663)
CVE-2023-39663
CWE-1333
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643)
CVE-2012-6643
CWE-138
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
CVE-2023-46695
CWE-770
High
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50916)
CVE-2022-50916
CWE-434
High
PHP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-3823)
CVE-2023-3823
CWE-611
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2023-0216)
CVE-2023-0216
CWE-476
High
WebLogic CVE-2023-22101 Vulnerability (CVE-2023-22101)
CVE-2023-22101
-
High
Next.js CVE-2023-46298 Vulnerability (CVE-2023-46298)
CVE-2023-46298
-
High
PleskLin Other Vulnerability (CVE-2013-0133)
CVE-2013-0133
-
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3704)
CVE-2014-3704
CWE-138
High
PleskWin Other Vulnerability (CVE-2013-0133)
CVE-2013-0133
-
High
Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050)
CVE-2023-41050
CWE-200
High
Varnish Cache Other Vulnerability (CVE-2015-8852)
CVE-2015-8852
-
High
Perl Improper Input Validation Vulnerability (CVE-2015-8853)
CVE-2015-8853
CWE-20
High
PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0135)
CVE-2013-0135
CWE-138
High
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-0156)
CVE-2013-0156
CWE-20
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-8769)
CVE-2015-8769
CWE-138
High
WebLogic CVE-2023-21842 Vulnerability (CVE-2023-21842)
CVE-2023-21842
-
High
Python Untrusted Search Path Vulnerability (CVE-2023-41105)
CVE-2023-41105
CWE-426
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2023-0217)
CVE-2023-0217
CWE-476
High