Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14673 vulnerabilities in this category.

Critical: 1573 High: 3882 Medium: 8446 Low: 770 Information: 2
Vulnerability Name
CVE
CWE
Severity
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2019-10097)
CVE-2019-10097
CWE-476
High
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10097)
CVE-2019-10097
CWE-787
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-10086)
CVE-2019-10086
CWE-502
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-10086)
CVE-2019-10086
CWE-502
High
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10081)
CVE-2019-10081
CWE-787
High
PHP Out-of-bounds Read Vulnerability (CVE-2025-14177)
CVE-2025-14177
CWE-125
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2019-10079)
CVE-2019-10079
CWE-20
High
Apache Tomcat Improper Locking Vulnerability (CVE-2019-10072)
CVE-2019-10072
CWE-667
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1010123)
CVE-2019-1010123
CWE-434
High
Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)
CVE-2019-1010054
CWE-352
High
Jenkins Insufficient Session Expiration Vulnerability (CVE-2019-1003049)
CVE-2019-1003049
CWE-613
High
Jenkins Insufficient Session Expiration Vulnerability (CVE-2019-1003004)
CVE-2019-1003004
CWE-613
High
Jenkins Insufficient Session Expiration Vulnerability (CVE-2019-1003003)
CVE-2019-1003003
CWE-613
High
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0958)
CVE-2019-0958
CWE-707
High
SharePoint Improper Input Validation Vulnerability (CVE-2019-0957)
CVE-2019-0957
CWE-20
High
Ruby Uncontrolled Resource Consumption Vulnerability (CVE-2018-8777)
CVE-2018-8777
CWE-400
High
SharePoint CVE-2018-8628 Vulnerability (CVE-2018-8628)
CVE-2018-8628
-
High
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2019-10174)
CVE-2019-10174
CWE-470
High
MySQL CVE-2018-3155 Vulnerability (CVE-2018-3155)
CVE-2018-3155
-
High
Atlassian Jira CVE-2018-5231 Vulnerability (CVE-2018-5231)
CVE-2018-5231
-
High
Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814)
CVE-2018-3814
CWE-434
High
Atlassian Confluence Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2025-22166)
CVE-2025-22166
CWE-405
High
XWikiplatform Missing Authorization Vulnerability (CVE-2025-23025)
CVE-2025-23025
CWE-862
High
WebLogic CVE-2018-3246 Vulnerability (CVE-2018-3246)
CVE-2018-3246
-
High
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-23209)
CVE-2025-23209
CWE-94
High
WebLogic CVE-2018-3213 Vulnerability (CVE-2018-3213)
CVE-2018-3213
-
High
Java Unspesificed Vulnerability (CVE-2018-3169)
CVE-2018-3169
-
High
GlassFish CVE-2018-3152 Vulnerability (CVE-2018-3152)
CVE-2018-3152
-
High
Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-6184)
CVE-2018-6184
CWE-22
High
Java Unspesificed Vulnerability (CVE-2018-3149)
CVE-2018-3149
-
High
Joomla CVE-2025-25227 Vulnerability (CVE-2025-25227)
CVE-2025-25227
-
High
MySQL CVE-2018-3064 Vulnerability (CVE-2018-3064)
CVE-2018-3064
-
High
Java Unspesificed Vulnerability (CVE-2018-2964)
CVE-2018-2964
-
High
Java Unspesificed Vulnerability (CVE-2018-2941)
CVE-2018-2941
-
High
Oracle Database Server CVE-2018-2939 Vulnerability (CVE-2018-2939)
CVE-2018-2939
-
High
WebLogic CVE-2018-2935 Vulnerability (CVE-2018-2935)
CVE-2018-2935
-
High
GlassFish CVE-2018-2911 Vulnerability (CVE-2018-2911)
CVE-2018-2911
-
High
GibbonEdu Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-26211)
CVE-2025-26211
CWE-352
High
Jboss EAP Incomplete List of Disallowed Inputs Vulnerability (CVE-2018-5968)
CVE-2018-5968
CWE-184
High
Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-6188)
CVE-2018-6188
CWE-200
High
ASP.NET MVC Improper Authentication Vulnerability (CVE-2018-8171)
CVE-2018-8171
CWE-287
High
SharePoint CVE-2025-21344 Vulnerability (CVE-2025-21344)
CVE-2025-21344
-
High
SharePoint CVE-2018-8161 Vulnerability (CVE-2018-8161)
CVE-2018-8161
-
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-8045)
CVE-2018-8045
CWE-138
High
Jboss EAP Improper Handling of Exceptional Conditions Vulnerability (CVE-2018-8039)
CVE-2018-8039
CWE-755
High
Apache Tomcat Improper Certificate Validation Vulnerability (CVE-2018-8034)
CVE-2018-8034
CWE-295
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2018-8022)
CVE-2018-8022
CWE-20
High
PHP Improper Input Validation Vulnerability (CVE-2025-1736)
CVE-2025-1736
CWE-20
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2018-8011)
CVE-2018-8011
CWE-476
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2025-1948)
CVE-2025-1948
CWE-400
High
SharePoint CVE-2025-21348 Vulnerability (CVE-2025-21348)
CVE-2025-21348
-
High
Oracle JRE Improper Access Control Vulnerability (CVE-2025-21587)
CVE-2025-21587
CWE-284
High
SharePoint CVE-2025-21400 Vulnerability (CVE-2025-21400)
CVE-2025-21400
-
High
PrestaShop Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-7491)
CVE-2018-7491
CWE-1021
High
ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2018-7201)
CVE-2018-7201
CWE-1236
High
osTicket CVE-2018-7195 Vulnerability (CVE-2018-7195)
CVE-2018-7195
-
High
FrontAccounting Cross-site Request Forgery (CSRF) Vulnerability (CVE-2018-7176)
CVE-2018-7176
-
High
Ruby Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-6914)
CVE-2018-6914
CWE-22
High
Perl Out-of-bounds Read Vulnerability (CVE-2018-6798)
CVE-2018-6798
CWE-125
High
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2025-21549)
CVE-2025-21549
CWE-400
High
WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2018-6389)
CVE-2018-6389
CWE-400
High
Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-10172)
CVE-2019-10172
CWE-611
High
Jboss EAP Missing Authorization Vulnerability (CVE-2019-10184)
CVE-2019-10184
CWE-862
High
Oracle Database Server CVE-2018-2841 Vulnerability (CVE-2018-2841)
CVE-2018-2841
-
High
Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12528)
CVE-2019-12528
CWE-200
High
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-58281)
CVE-2024-58281
CWE-434
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-58282)
CVE-2024-58282
CWE-434
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12872)
CVE-2019-12872
CWE-138
High
Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2019-12855)
CVE-2019-12855
CWE-295
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-12854)
CVE-2019-12854
CWE-119
High
MyBB Improper Input Validation Vulnerability (CVE-2019-12831)
CVE-2019-12831
CWE-20
High
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12830)
CVE-2019-12830
CWE-707
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-58341)
CVE-2024-58341
CWE-138
High
Squid Out-of-bounds Write Vulnerability (CVE-2019-12527)
CVE-2019-12527
CWE-787
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-56374)
CVE-2024-56374
CWE-770
High