Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15552 vulnerabilities in this category.

Critical: 1687 High: 4225 Medium: 8839 Low: 799 Information: 2
Vulnerability Name
CVE
CWE
Severity
Oracle Reports rwservlet vulnerabilities
CVE-2012-3153
CWE-20
High
PHP-CGI remote code execution
CVE-2012-2311
CWE-20
High
Parallels Plesk SQL injection vulnerability
CVE-2012-1557
CWE-89
High
Rails mass assignment
-
CWE-915
High
Ruby on Rails SQL injection
CVE-2012-2695
CWE-89
High
Rails remote code execution using render :inline
CVE-2016-2098
CWE-94
High
Ruby on Rails directory traversal vulnerability
CVE-2014-0130
CWE-22
High
Microsoft SharePoint XSS spoofing vulnerability
CVE-2015-2522
CWE-80
High
Apache Struts 2 ClassLoader manipulation and denial of service (S2-020)
CVE-2014-0050
CWE-701
High
Apache Struts 2 ClassLoader manipulation and denial of service
CVE-2014-0114
CWE-701
High
Multiple critical vulnerabilities in Apache Struts2
CVE-2012-0393
CWE-917
High
Struts2/XWork remote command execution (S2-014)
CVE-2013-2115
CWE-94
High
timthumb.php remote code execution
CVE-2011-4106
CWE-20
High
Umbraco CMS TemplateService remote code execution
CVE-2013-4793
CWE-94
High
Umbraco CMS remote code execution
-
CWE-94
High
VirtueMart access control bypass
-
CWE-287
High
WebLogic Server Side Request Forgery
CVE-2014-4242
CWE-918
High
WooFramework shortcode exploit
-
CWE-95
High
WordPress OptimizePress unrestricted file upload
CVE-2013-7102
CWE-20
High
Zabbix 2.0.8 SQL injection
CVE-2013-5743
CWE-89
High
Zend Framework local file disclosure via XXE injection
CVE-2015-5161
CWE-611
High
CKEditor 4.0.1 cross-site scripting vulnerability
-
CWE-79
High
Drupal core 7.x SQL injection vulnerability
CVE-2014-3704
CWE-89
High
Drupal 7 arbitrary PHP code execution and information disclosure
CVE-2012-4554
CWE-434
High
Ektron CMS400.NET ContentRatingGraph.aspx SQL injection
CVE-2008-5122
CWE-89
High
Ektron CMS multiple vulnerabilities
-
CWE-434
High
Ektron CMS unauthenticated code execution and Local File Read
CVE-2012-5358
CWE-20
High
Elasticsearch remote code execution
CVE-2014-3120
CWE-78
High
Gallery 3.0.4 remote code execution
-
CWE-20
High
Horde/IMP Plesk webmail exploit
-
CWE-20
High
Invision Power Board version 3.3.4 unserialize PHP code execution
CVE-2012-5692
CWE-20
High
Joomla! 1.6/1.7/2.5 privilege escalation vulnerability
CVE-2012-1563
CWE-269
High
Joomla! 1.6.0 SQL injection vulnerability
CVE-2011-1151
CWE-89
High
Joomla! 1.7/2.5 SQL injection vulnerability
CVE-2012-1116
CWE-89
High
Kayako Fusion v4.51.1891 - multiple web vulnerabilities
-
CWE-79
High
Liferay JSON service API authentication vulnerability
-
CWE-287
High
lighttpd v1.4.34 SQL injection and path traversal
CVE-2014-2324
CWE-89
High
IBM Lotus Domino web server Cross-Site Scripting vulnerabilities
CVE-2012-3302
CWE-79
High
MediaWiki multiple remote vulnerabilities
CVE-2012-4378
CWE-79
High
MoinMoin CVE-2012-6081 multiple arbitrary code execution vulnerabilities
CVE-2012-6081
CWE-434
High
Vulnerabilities in SharePoint could allow elevation of privilege
CVE-2012-1859
CWE-79
High
Nginx memory disclosure with specially crafted HTTP backend responses
CVE-2012-1180
CWE-416
High
Unrestricted file upload vulnerability in ofc_upload_image.php
CVE-2009-4140
CWE-434
High
OpenX 2.8.10 backdoor
CVE-2013-4211
CWE-95
High
phpMyAdmin v3.5.2.2 backdoor
CVE-2012-5159
CWE-95
High
Roundcube security updates 0.8.6 and 0.7.3
CVE-2013-1904
CWE-22
High
SQL Injection in Symphony
CVE-2013-2559
CWE-89
High
Typo3 core sanitizeLocalUrl() non-persistent cross-site scripting
CVE-2015-5956
CWE-79
High
vBulletin 5.1.2 SQL injection
CVE-2014-5102
CWE-89
High
vBulletin PHP object injection vulnerability
-
CWE-915
High
vBSEO 3.6.0 PHP code injection
CVE-2012-5223
CWE-94
High
vBulletin 4 (up to 4.1.2) search.php SQL injection
-
CWE-89
High
vBulletin customer number disclosure
CVE-2013-6129
CWE-200
High
WordPress W3 Total Cache plugin predictable cache filenames
CVE-2012-6079
CWE-200
High
WordPress caching plugins PHP code execution
CVE-2013-2010
CWE-95
High
TinyMCE ajax_create_folder remote code execution vulnerability
-
CWE-94
High
Uploadify arbitrary file upload
-
CWE-434
High
phpThumb() fltr[] parameter command injection vulnerability
CVE-2010-1598
CWE-20
High
VMware directory traversal and privilege escalation vulnerabilities
CVE-2009-3733
CWE-22
High
OpenX arbitrary file upload
CVE-2009-4140
CWE-434
High
Nginx PHP code execution via FastCGI
-
CWE-94
High
Remote File Inclusion (admin/lang.php) (CMS Made Simple)
CVE-2005-2846
CWE-98
High
SQL Injection (stylesheet.php) (CMS Made Simple)
CVE-2007-2473
CWE-89
High
Web Server Cache Poisoning (CMS Made Simple) v2.x
CVE-2016-2784
CWE-20
High
Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.6.x
CVE-2010-2797
CWE-22
High
Directory Traversal (lib/translation.functions.php) (CMS Made Simple) v1.8.x
CVE-2010-2797
CWE-22
High
Microsoft IIS 6.0 WebDAV Buffer Overflow
CVE-2017-7269
CWE-287
High
Apache Struts2 Remote Command Execution (S2-048)
CVE-2017-9791
CWE-94
High
Apache Struts2 Remote Command Execution (S2-052)
CVE-2017-9805
CWE-94
High
Atlassian Confluence information disclosure
CVE-2017-7415
CWE-306
High
Joomla! Core Security Bypass
CVE-2017-11364
CWE-285
High
Apache Shiro Deserialization RCE
CVE-2016-4437
CWE-78
High
Apache Tomcat Information Disclosure CVE-2017-7674
CVE-2017-12616
CWE-200
High
Atlassian OAuth Plugin IconUriServlet SSRF
CVE-2017-9506
CWE-918
High
Cisco Adaptive Security Appliance (ASA) Path Traversal (CVE-2018-0296)
CVE-2018-0296
CWE-22
High