Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
PHP Other Vulnerability (CVE-2015-4644)
CVE-2015-4644
-
High
Liferay DXP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123)
CVE-2022-42123
CWE-22
High
Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2022-42124)
CVE-2022-42124
CWE-1333
High
Liferay DXP Inefficient Regular Expression Complexity Vulnerability (CVE-2022-42124)
CVE-2022-42124
CWE-1333
High
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42125)
CVE-2022-42125
CWE-22
High
WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203)
CVE-2014-5203
-
High
Vanilla Forums Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3527)
CVE-2013-3527
CWE-138
High
PHP Improper Input Validation Vulnerability (CVE-2015-4604)
CVE-2015-4604
CWE-20
High
PHP Improper Input Validation Vulnerability (CVE-2015-4605)
CVE-2015-4605
CWE-20
High
Moment.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-24785)
CVE-2022-24785
CWE-22
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)
CVE-2023-25577
CWE-770
High
WeBid Other Vulnerability (CVE-2014-5114)
CVE-2014-5114
-
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4654)
CVE-2015-4654
CWE-138
High
XWiki Incomplete Cleanup Vulnerability (CVE-2023-36468)
CVE-2023-36468
CWE-459
High
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-24734)
CVE-2022-24734
CWE-94
High
Drupal Inefficient Regular Expression Complexity Vulnerability (CVE-2022-24729)
CVE-2022-24729
CWE-1333
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-42252)
CVE-2022-42252
-
High
Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36260)
CVE-2023-36260
CWE-138
High
ownCloud Resource Management Errors Vulnerability (CVE-2015-4717)
CVE-2015-4717
-
High
Microsoft SQL Server CVE-2023-36417 Vulnerability (CVE-2023-36417)
CVE-2023-36417
-
High
CKEditor Other Vulnerability (CVE-2022-24729)
CVE-2022-24729
-
High
concrete5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4724)
CVE-2015-4724
CWE-138
High
Microsoft SQL Server CVE-2023-36420 Vulnerability (CVE-2023-36420)
CVE-2023-36420
-
High
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-25170)
CVE-2023-25170
CWE-352
High
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-24955)
CVE-2023-24955
CWE-94
High
Django Uncontrolled Resource Consumption Vulnerability (CVE-2023-24580)
CVE-2023-24580
CWE-400
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23307)
CVE-2022-23307
CWE-502
High
Django Resource Management Errors Vulnerability (CVE-2015-5143)
CVE-2015-5143
-
High
Liferay DXP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42121)
CVE-2022-42121
CWE-138
High
Apache Tomcat Other Vulnerability (CVE-2015-5346)
CVE-2015-5346
-
High
Jenkins Improper Access Control Vulnerability (CVE-2015-5325)
CVE-2015-5325
CWE-284
High
SharePoint CVE-2023-36891 Vulnerability (CVE-2023-36891)
CVE-2023-36891
-
High
Grafana Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-21703)
CVE-2022-21703
CWE-352
High
SharePoint CVE-2023-36892 Vulnerability (CVE-2023-36892)
CVE-2023-36892
-
High
Oracle JRE CVE-2013-2448 Vulnerability (CVE-2013-2448)
CVE-2013-2448
-
High
Oracle JRE CVE-2013-2445 Vulnerability (CVE-2013-2445)
CVE-2013-2445
-
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21664)
CVE-2022-21664
CWE-138
High
Oracle JRE CVE-2013-2442 Vulnerability (CVE-2013-2442)
CVE-2013-2442
-
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5338)
CVE-2015-5338
CWE-352
High
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2022-21663)
CVE-2022-21663
CWE-502
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21661)
CVE-2022-21661
CWE-138
High
Dot CMS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2022-45782)
CVE-2022-45782
CWE-338
High
Oracle HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-21716)
CVE-2022-21716
CWE-120
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-45867)
CVE-2022-45867
CWE-22
High
Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5351)
CVE-2015-5351
CWE-352
High
Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2022-21655)
CVE-2022-21655
CWE-670
High
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5383)
CVE-2015-5383
CWE-200
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-5590)
CVE-2015-5590
CWE-119
High
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-5591)
CVE-2015-5591
CWE-138
High
Apache Traffic Server CVE-2022-47184 Vulnerability (CVE-2022-47184)
CVE-2022-47184
-
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-22526)
CVE-2023-22526
CWE-94
High
Python Other Vulnerability (CVE-2015-5652)
CVE-2015-5652
-
High
SugarCRM Incomplete List of Disallowed Inputs Vulnerability (CVE-2015-5946)
CVE-2015-5946
CWE-184
High
Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522)
CVE-2023-22522
CWE-138
High
MySQL CVE-2022-21600 Vulnerability (CVE-2022-21600)
CVE-2022-21600
-
High
Twisted Web HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21712)
CVE-2022-21712
CWE-200
High
Twisted Web HTTP Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-21716)
CVE-2022-21716
CWE-120
High
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2022-23181)
CVE-2022-23181
CWE-367
High
Apache Tomcat Resource Management Errors Vulnerability (CVE-2014-0230)
CVE-2014-0230
-
High
Python CVE-2022-42919 Vulnerability (CVE-2022-42919)
CVE-2022-42919
-
High
Django Resource Management Errors Vulnerability (CVE-2015-5145)
CVE-2015-5145
-
High
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-5017)
CVE-2014-5017
CWE-138
High
Python Inadequate Encryption Strength Vulnerability (CVE-2014-0224)
CVE-2014-0224
CWE-326
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)
CVE-2023-22795
CWE-1333
High
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43279)
CVE-2022-43279
CWE-138
High
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-43288)
CVE-2022-43288
CWE-138
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22792)
CVE-2023-22792
CWE-1333
High
Oracle JRE CVE-2013-2461 Vulnerability (CVE-2013-2461)
CVE-2013-2461
-
High
Moodle 7PK - Security Features Vulnerability (CVE-2015-5267)
CVE-2015-5267
-
High
Oracle HTTP Server Improper Initialization Vulnerability (CVE-2022-22719)
CVE-2022-22719
CWE-665
High
SharePoint CVE-2023-36764 Vulnerability (CVE-2023-36764)
CVE-2023-36764
-
High
SharePoint CVE-2022-44690 Vulnerability (CVE-2022-44690)
CVE-2022-44690
-
High
PHP Other Vulnerability (CVE-2014-0236)
CVE-2014-0236
-
High
SharePoint CVE-2022-44693 Vulnerability (CVE-2022-44693)
CVE-2022-44693
-
High