Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
WordPress Uncontrolled Resource Consumption Vulnerability (CVE-2023-22622)
CVE-2023-22622
CWE-400
High
Microsoft SQL Server CVE-2023-36730 Vulnerability (CVE-2023-36730)
CVE-2023-36730
-
High
SharePoint CVE-2023-36762 Vulnerability (CVE-2023-36762)
CVE-2023-36762
-
High
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45020)
CVE-2022-45020
CWE-707
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2022-45061)
CVE-2022-45061
CWE-400
High
Payara Files or Directories Accessible to External Parties Vulnerability (CVE-2022-45129)
CVE-2022-45129
CWE-552
High
Apache Tomcat Improper Encoding or Escaping of Output Vulnerability (CVE-2022-45143)
CVE-2022-45143
CWE-116
High
SharePoint CVE-2022-21837 Vulnerability (CVE-2022-21837)
CVE-2022-21837
-
High
Next.js CVE-2022-21721 Vulnerability (CVE-2022-21721)
CVE-2022-21721
-
High
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-42123)
CVE-2022-42123
CWE-22
High
Twisted Web HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-24801)
CVE-2022-24801
CWE-444
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4115)
CVE-2013-4115
CWE-119
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-27233)
CVE-2023-27233
CWE-138
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-41927)
CVE-2022-41927
CWE-352
High
MySQL CVE-2014-6500 Vulnerability (CVE-2014-6500)
CVE-2014-6500
-
High
MediaWiki CVE-2022-28204 Vulnerability (CVE-2022-28204)
CVE-2022-28204
-
High
MediaWiki Release of Invalid Pointer or Reference Vulnerability (CVE-2022-28203)
CVE-2022-28203
CWE-763
High
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41928)
CVE-2022-41928
CWE-707
High
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-35808)
CVE-2023-35808
CWE-434
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-28129)
CVE-2022-28129
CWE-20
High
MediaWiki Resource Management Errors Vulnerability (CVE-2015-2936)
CVE-2015-2936
-
High
MediaWiki Resource Management Errors Vulnerability (CVE-2015-2937)
CVE-2015-2937
-
High
XWiki Missing Authorization Vulnerability (CVE-2022-41930)
CVE-2022-41930
CWE-862
High
MediaWiki Resource Management Errors Vulnerability (CVE-2015-2942)
CVE-2015-2942
-
High
MySQL CVE-2014-6491 Vulnerability (CVE-2014-6491)
CVE-2014-6491
-
High
PHP Other Vulnerability (CVE-2015-2787)
CVE-2015-2787
-
High
Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-27427)
CVE-2022-27427
CWE-94
High
Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27426)
CVE-2022-27426
CWE-918
High
XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41931)
CVE-2022-41931
CWE-707
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-41934)
CVE-2022-41934
CWE-116
High
XWiki Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2022-41936)
CVE-2022-41936
CWE-359
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3167)
CVE-2015-3167
CWE-200
High
Chamilo Improper Privilege Management Vulnerability (CVE-2022-27421)
CVE-2022-27421
CWE-269
High
GibbonEdu Session Fixation Vulnerability (CVE-2022-27305)
CVE-2022-27305
CWE-384
High
XWiki Missing Authorization Vulnerability (CVE-2022-41937)
CVE-2022-41937
CWE-862
High
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3193)
CVE-2015-3193
CWE-200
High
OpenSSL Other Vulnerability (CVE-2015-3194)
CVE-2015-3194
-
High
Python Untrusted Search Path Vulnerability (CVE-2022-26488)
CVE-2022-26488
CWE-426
High
XWiki Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-27480)
CVE-2023-27480
CWE-611
High
Mailman Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-2775)
CVE-2015-2775
CWE-22
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-42029)
CVE-2022-42029
CWE-434
High
Envoy Proxy CVE-2023-27496 Vulnerability (CVE-2023-27496)
CVE-2023-27496
-
High
PHP Numeric Errors Vulnerability (CVE-2015-2331)
CVE-2015-2331
-
High
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35030)
CVE-2023-35030
CWE-352
High
Varnish Cache Other Vulnerability (CVE-2013-4090)
CVE-2013-4090
-
High
Nginx Out-of-bounds Read Vulnerability (CVE-2023-27727)
CVE-2023-27727
CWE-125
High
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2022-29225)
CVE-2022-29225
CWE-409
High
Grafana URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-29170)
CVE-2022-29170
CWE-601
High
Python Improper Input Validation Vulnerability (CVE-2013-7338)
CVE-2013-7338
CWE-20
High
MyBB CVE-2015-2352 Vulnerability (CVE-2015-2352)
CVE-2015-2352
-
High
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-35133)
CVE-2023-35133
CWE-918
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27522)
CVE-2023-27522
-
High
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-28981)
CVE-2022-28981
CWE-22
High
Ruby Out-of-bounds Read Vulnerability (CVE-2022-28739)
CVE-2022-28739
CWE-125
High
Nginx Out-of-bounds Write Vulnerability (CVE-2022-41742)
CVE-2022-41742
CWE-787
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)
CVE-2020-13760
CWE-352
High
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35141)
CVE-2023-35141
CWE-352
High
Perl Numeric Errors Vulnerability (CVE-2013-7422)
CVE-2013-7422
-
High
Oracle JRE CVE-2023-21930 Vulnerability (CVE-2023-21930)
CVE-2023-21930
-
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35150)
CVE-2023-35150
CWE-94
High
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-35151)
CVE-2023-35151
CWE-668
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35152)
CVE-2023-35152
CWE-94
High
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0001)
CVE-2014-0001
CWE-119
High
XWiki CVE-2023-35166 Vulnerability (CVE-2023-35166)
CVE-2023-35166
-
High
Lighttpd Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2022-41556)
CVE-2022-41556
CWE-401
High
Nginx Out-of-bounds Write Vulnerability (CVE-2022-41741)
CVE-2022-41741
CWE-787
High
MediaWiki CVE-2022-28323 Vulnerability (CVE-2022-28323)
CVE-2022-28323
-
High
SugarCRM CVE-2023-35809 Vulnerability (CVE-2023-35809)
CVE-2023-35809
-
High
Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-26377)
CVE-2022-26377
CWE-444
High
Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528)
CVE-2013-3528
-
High
Drupal Improper Input Validation Vulnerability (CVE-2022-25273)
CVE-2022-25273
CWE-20
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-26472)
CVE-2023-26472
CWE-116
High
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)
CVE-2015-3416
CWE-190
High
XWiki CVE-2023-26471 Vulnerability (CVE-2023-26471)
CVE-2023-26471
-
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)
CVE-2015-3416
CWE-190
High