Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0793)
CVE-2023-0793
CWE-521
High
Dotclear Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-1613)
CVE-2014-1613
CWE-94
High
OpenSSL Numeric Errors Vulnerability (CVE-2016-2105)
CVE-2016-2105
-
High
Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-1912)
CVE-2014-1912
CWE-119
High
YetiForce CRM Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-0269)
CVE-2022-0269
CWE-352
High
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0714)
CVE-2016-0714
CWE-264
High
ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2044)
CVE-2014-2044
CWE-94
High
Apache HTTP Server Cryptographic Issues Vulnerability (CVE-2016-0736)
CVE-2016-0736
-
High
Nginx Other Vulnerability (CVE-2016-0742)
CVE-2016-0742
-
High
Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-2098)
CVE-2016-2098
CWE-20
High
Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
CVE-2023-1108
CWE-835
High
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-2041)
CVE-2016-2041
-
High
phpMyFAQ Uncaught Exception Vulnerability (CVE-2023-0790)
CVE-2023-0790
CWE-248
High
Oracle HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391)
CVE-2022-0391
CWE-138
High
Jenkins CVE-2023-43498 Vulnerability (CVE-2023-43498)
CVE-2023-43498
-
High
OpenSSL Improper Input Validation Vulnerability (CVE-2014-3567)
CVE-2014-3567
CWE-20
High
Undertow CVE-2022-1259 Vulnerability (CVE-2022-1259)
CVE-2022-1259
-
High
Jboss EAP CVE-2022-1259 Vulnerability (CVE-2022-1259)
CVE-2022-1259
-
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-0983)
CVE-2022-0983
CWE-138
High
Jboss EAP Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2022-0853)
CVE-2022-0853
CWE-401
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-0819)
CVE-2022-0819
CWE-94
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-43622)
CVE-2023-43622
CWE-400
High
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-0813)
CVE-2022-0813
CWE-200
High
Oracle JRE CVE-2013-1563 Vulnerability (CVE-2013-1563)
CVE-2013-1563
-
High
Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228)
CVE-2022-29228
CWE-617
High
OpenSSL Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-0778)
CVE-2022-0778
CWE-835
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-46242)
CVE-2023-46242
CWE-352
High
Django Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-45116)
CVE-2021-45116
CWE-668
High
Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-0771)
CVE-2023-0771
CWE-138
High
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-44967)
CVE-2021-44967
CWE-434
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157)
CVE-2016-2157
CWE-352
High
WebLogic CVE-2023-21837 Vulnerability (CVE-2023-21837)
CVE-2023-21837
-
High
Django Uncontrolled Resource Consumption Vulnerability (CVE-2021-45115)
CVE-2021-45115
CWE-400
High
Werkzeug WSGI Out-of-bounds Write Vulnerability (CVE-2023-46136)
CVE-2023-46136
CWE-787
High
Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2022-0573)
CVE-2022-0573
CWE-502
High
GibbonEdu Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-45880)
CVE-2023-45880
CWE-22
High
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-43665)
CVE-2023-43665
CWE-1284
High
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2022-0538)
CVE-2022-0538
CWE-502
High
Oracle JRE CVE-2013-2429 Vulnerability (CVE-2013-2429)
CVE-2013-2429
-
High
SharePoint CVE-2022-38008 Vulnerability (CVE-2022-38008)
CVE-2022-38008
-
High
Magento Improper Input Validation Vulnerability (CVE-2015-6497)
CVE-2015-6497
CWE-20
High
Grafana Incorrect Authorization Vulnerability (CVE-2022-31107)
CVE-2022-31107
CWE-863
High
Moment.js Other Vulnerability (CVE-2022-31129)
CVE-2022-31129
-
High
PleskLin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
CVE-2013-4878
CWE-264
High
PleskWin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4878)
CVE-2013-4878
CWE-264
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-40407)
CVE-2022-40407
CWE-434
High
Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2014-7143)
CVE-2014-7143
CWE-295
High
Microsoft SQL Server CVE-2023-32026 Vulnerability (CVE-2023-32026)
CVE-2023-32026
-
High
Microsoft SQL Server CVE-2023-32027 Vulnerability (CVE-2023-32027)
CVE-2023-32027
-
High
Microsoft SQL Server CVE-2023-32028 Vulnerability (CVE-2023-32028)
CVE-2023-32028
-
High
XWiki Incorrect Authorization Vulnerability (CVE-2023-32069)
CVE-2023-32069
CWE-863
High
SharePoint CVE-2023-28288 Vulnerability (CVE-2023-28288)
CVE-2023-28288
-
High
Grafana Improper Verification of Cryptographic Signature Vulnerability (CVE-2022-31123)
CVE-2022-31123
CWE-347
High
IBMHttpServer Observable Discrepancy Vulnerability (CVE-2023-32342)
CVE-2023-32342
CWE-203
High
Microsoft SQL Server CVE-2023-32025 Vulnerability (CVE-2023-32025)
CVE-2023-32025
-
High
TYPO3 Insufficient Session Expiration Vulnerability (CVE-2022-31050)
CVE-2022-31050
CWE-613
High
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2015-10005)
CVE-2015-10005
CWE-1333
High
Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-32679)
CVE-2023-32679
CWE-138
High
MediaWiki Session Fixation Vulnerability (CVE-2013-4572)
CVE-2013-4572
CWE-384
High
MediaWiki Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4571)
CVE-2013-4571
CWE-119
High
SharePoint CVE-2023-33130 Vulnerability (CVE-2023-33130)
CVE-2023-33130
-
High
SharePoint CVE-2022-41036 Vulnerability (CVE-2022-41036)
CVE-2022-41036
-
High
Play Framework Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-31023)
CVE-2022-31023
CWE-209
High
Play Framework Uncontrolled Resource Consumption Vulnerability (CVE-2022-31018)
CVE-2022-31018
CWE-400
High
PHP Use After Free Vulnerability (CVE-2015-1351)
CVE-2015-1351
CWE-416
High
SharePoint CVE-2023-33134 Vulnerability (CVE-2023-33134)
CVE-2023-33134
-
High
Grafana Insufficiently Protected Credentials Vulnerability (CVE-2022-31130)
CVE-2022-31130
CWE-522
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-28329)
CVE-2023-28329
CWE-138
High
Lighttpd Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4559)
CVE-2013-4559
CWE-264
High
MySQL CVE-2015-0411 Vulnerability (CVE-2015-0411)
CVE-2015-0411
-
High
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0292)
CVE-2015-0292
CWE-119
High
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-32275)
CVE-2022-32275
CWE-22
High
osTicket Session Fixation Vulnerability (CVE-2022-31888)
CVE-2022-31888
CWE-384
High
OpenSSL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-3786)
CVE-2022-3786
CWE-120
High
WordPress Ultimate Member Plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-3966)
CVE-2022-3966
CWE-22
High