Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10039)
CVE-2016-10039
CWE-22
High
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3512)
CVE-2014-3512
CWE-119
High
Grafana CVE-2023-1387 Vulnerability (CVE-2023-1387)
CVE-2023-1387
-
High
Perl Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-1238)
CVE-2016-1238
CWE-264
High
Oracle JRE CVE-2013-0444 Vulnerability (CVE-2013-0444)
CVE-2013-0444
-
High
AbanteCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10755)
CVE-2016-10755
CWE-138
High
MongoDb Improper Certificate Validation Vulnerability (CVE-2023-1409)
CVE-2023-1409
CWE-295
High
Jenkins CVE-2014-2063 Vulnerability (CVE-2014-2063)
CVE-2014-2063
-
High
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4182)
CVE-2021-4182
CWE-835
High
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)
CVE-2014-3530
CWE-200
High
ownCloud Other Vulnerability (CVE-2014-2053)
CVE-2014-2053
-
High
PHP Numeric Errors Vulnerability (CVE-2016-1904)
CVE-2016-1904
-
High
OpenVPN AS Other Vulnerability (CVE-2021-4234)
CVE-2021-4234
-
High
UAParser.js Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-4229)
CVE-2021-4229
CWE-829
High
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0766)
CVE-2016-0766
CWE-264
High
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
CVE-2023-1108
CWE-835
High
PostgreSQL Improper Access Control Vulnerability (CVE-2016-0768)
CVE-2016-0768
CWE-284
High
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0773)
CVE-2016-0773
CWE-119
High
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-1927)
CVE-2016-1927
-
High
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2051)
CVE-2014-2051
CWE-94
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-46147)
CVE-2021-46147
CWE-352
High
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4185)
CVE-2021-4185
CWE-835
High
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4184)
CVE-2021-4184
CWE-835
High
OpenSSL Resource Management Errors Vulnerability (CVE-2016-0798)
CVE-2016-0798
-
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-45371)
CVE-2023-45371
CWE-770
High
MediaWiki Uncontrolled Resource Consumption Vulnerability (CVE-2021-46149)
CVE-2021-46149
CWE-400
High
Jenkins Improper Input Validation Vulnerability (CVE-2016-0792)
CVE-2016-0792
CWE-20
High
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-45363)
CVE-2023-45363
CWE-835
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3541)
CVE-2014-3541
CWE-94
High
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0793)
CVE-2016-0793
CWE-200
High
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1499)
CVE-2016-1499
CWE-200
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)
CVE-2013-1468
CWE-352
High
CubeCart Improper Input Validation Vulnerability (CVE-2013-1465)
CVE-2013-1465
CWE-20
High
OpenSSL Other Vulnerability (CVE-2016-0797)
CVE-2016-0797
-
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135)
CVE-2023-45135
CWE-116
High
Jboss EAP Other Vulnerability (CVE-2014-3490)
CVE-2014-3490
-
High
Ruby on Rails Resource Management Errors Vulnerability (CVE-2016-0751)
CVE-2016-0751
-
High
Nginx Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-4034)
CVE-2021-4034
CWE-787
High
e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10378)
CVE-2016-10378
CWE-138
High
OpenSSL Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4044)
CVE-2021-4044
CWE-835
High
Kong Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Oracle JRE CVE-2013-0419 Vulnerability (CVE-2013-0419)
CVE-2013-0419
-
High
Microsoft SQL Server CVE-2023-21704 Vulnerability (CVE-2023-21704)
CVE-2023-21704
-
High
Apache Tomcat CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Open Resty Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Apache Traffic Server CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Oracle HTTP Server CVE-2023-22019 Vulnerability (CVE-2023-22019)
CVE-2023-22019
-
High
PHP Improper Input Validation Vulnerability (CVE-2016-10397)
CVE-2016-10397
CWE-20
High
Oracle JRE CVE-2013-0351 Vulnerability (CVE-2013-0351)
CVE-2013-0351
-
High
ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10400)
CVE-2016-10400
CWE-22
High
PHP Improper Input Validation Vulnerability (CVE-2016-10712)
CVE-2016-10712
CWE-20
High
Caddy Web Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
CVE-2023-44487
CWE-400
High
Jenkins CVE-2023-44487 Vulnerability (CVE-2023-44487)
CVE-2023-44487
-
High
Nginx Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0337)
CVE-2013-0337
CWE-264
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2021-4104)
CVE-2021-4104
CWE-502
High
Riot.js Resource Management Errors Vulnerability (CVE-2016-10527)
CVE-2016-10527
-
High
Oracle JRE CVE-2013-0423 Vulnerability (CVE-2013-0423)
CVE-2013-0423
-
High
Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-10751)
CVE-2016-10751
CWE-22
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3483)
CVE-2014-3483
CWE-138
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2736)
CVE-2014-2736
CWE-138
High
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10073)
CVE-2016-10073
CWE-200
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3482)
CVE-2014-3482
CWE-138
High
Microsoft SQL Server CVE-2023-21713 Vulnerability (CVE-2023-21713)
CVE-2023-21713
-
High
Microsoft SQL Server CVE-2023-21705 Vulnerability (CVE-2023-21705)
CVE-2023-21705
-
High
PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
CVE-2023-43784
CWE-668
High
phpMyFAQ Improper Privilege Management Vulnerability (CVE-2023-1762)
CVE-2023-1762
CWE-269
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10084)
CVE-2016-10084
CWE-284
High
PleskWin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
CVE-2023-43784
CWE-668
High
Oracle JRE CVE-2013-0429 Vulnerability (CVE-2013-0429)
CVE-2013-0429
-
High
ownCloud Other Vulnerability (CVE-2014-2054)
CVE-2014-2054
-
High
Piwigo Improper Access Control Vulnerability (CVE-2016-10085)
CVE-2016-10085
CWE-284
High
Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-10345)
CVE-2016-10345
CWE-264
High