🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
14981 vulnerabilities
in this category.
Critical: 1612
High: 4015
Medium: 8569
Low: 783
Information: 2
Vulnerability Name
CVE
CWE
Severity
Grafana CVE-2023-1387 Vulnerability (CVE-2023-1387)
CVE-2023-1387
-
High
MongoDb Improper Certificate Validation Vulnerability (CVE-2023-1409)
CVE-2023-1409
CWE-295
High
Joomla Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-10238)
CVE-2020-10238
CWE-668
High
phpMyFAQ Improper Privilege Management Vulnerability (CVE-2023-1762)
CVE-2023-1762
CWE-269
High
Oracle Database Server CVE-2013-3774 Vulnerability (CVE-2013-3774)
CVE-2013-3774
-
High
Oracle Database Server CVE-2013-3771 Vulnerability (CVE-2013-3771)
CVE-2013-3771
-
High
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2023-0662)
CVE-2023-0662
CWE-400
High
Restlet Framework XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2013-4221)
CVE-2013-4221
CWE-91
High
Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3638)
CVE-2013-3638
CWE-138
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2023-0217)
CVE-2023-0217
CWE-476
High
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50916)
CVE-2022-50916
CWE-434
High
WordPress Improper Input Validation Vulnerability (CVE-2013-4339)
CVE-2013-4339
CWE-20
High
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4338)
CVE-2013-4338
CWE-94
High
e107 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-50939)
CVE-2022-50939
CWE-22
High
OpenSSL Use After Free Vulnerability (CVE-2023-0215)
CVE-2023-0215
CWE-416
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2023-0216)
CVE-2023-0216
CWE-476
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-4313)
CVE-2013-4313
CWE-138
High
OpenSSL Improper Certificate Validation Vulnerability (CVE-2023-0464)
CVE-2023-0464
CWE-295
High
OpenSSL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2023-0286)
CVE-2023-0286
CWE-843
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3398)
CVE-2019-3398
CWE-22
High
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-3399)
CVE-2019-3399
CWE-862
High
MediaWiki Improper Authentication Vulnerability (CVE-2013-4304)
CVE-2013-4304
CWE-287
High
Restlet Framework Deserialization of Untrusted Data Vulnerability (CVE-2013-4271)
CVE-2013-4271
CWE-502
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2023-0401)
CVE-2023-0401
CWE-476
High
ownCloud Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-10252)
CVE-2020-10252
CWE-918
High
Oracle Database Server CVE-2013-3760 Vulnerability (CVE-2013-3760)
CVE-2013-3760
-
High
Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528)
CVE-2013-3528
-
High
Ampache Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-4665)
CVE-2022-4665
CWE-434
High
WebLogic CVE-2023-21837 Vulnerability (CVE-2023-21837)
CVE-2023-21837
-
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0931)
CVE-2020-0931
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0929)
CVE-2020-0929
CWE-434
High
Oracle JRE CVE-2013-2461 Vulnerability (CVE-2013-2461)
CVE-2013-2461
-
High
IBM RTC Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-4252)
CVE-2019-4252
CWE-22
High
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707)
CVE-2019-4707
CWE-611
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0920)
CVE-2020-0920
CWE-434
High
WebLogic CVE-2023-21838 Vulnerability (CVE-2023-21838)
CVE-2023-21838
-
High
IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)
CVE-2019-4145
-
High
WebLogic CVE-2023-21839 Vulnerability (CVE-2023-21839)
CVE-2023-21839
-
High
Python NULL Pointer Dereference Vulnerability (CVE-2019-5010)
CVE-2019-5010
CWE-476
High
WebLogic CVE-2023-21841 Vulnerability (CVE-2023-21841)
CVE-2023-21841
-
High
WebLogic CVE-2023-21842 Vulnerability (CVE-2023-21842)
CVE-2023-21842
-
High
Oracle JRE CVE-2013-2448 Vulnerability (CVE-2013-2448)
CVE-2013-2448
-
High
Sqlite Use After Free Vulnerability (CVE-2019-5018)
CVE-2019-5018
CWE-416
High
Oracle JRE CVE-2013-2445 Vulnerability (CVE-2013-2445)
CVE-2013-2445
-
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0932)
CVE-2020-0932
CWE-434
High
IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)
CVE-2019-4135
-
High
Vanilla Forums Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3527)
CVE-2013-3527
CWE-138
High
Moodle Improper Privilege Management Vulnerability (CVE-2019-3849)
CVE-2019-3849
CWE-269
High
Microsoft SQL Server CVE-2023-21528 Vulnerability (CVE-2023-21528)
CVE-2023-21528
-
High
Microsoft SQL Server CVE-2023-21704 Vulnerability (CVE-2023-21704)
CVE-2023-21704
-
High
SharePoint CVE-2020-0980 Vulnerability (CVE-2020-0980)
CVE-2020-0980
-
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2019-3823)
CVE-2019-3823
CWE-125
High
Moodle Improper Input Validation Vulnerability (CVE-2019-3847)
CVE-2019-3847
CWE-20
High
Microsoft SQL Server CVE-2023-21705 Vulnerability (CVE-2023-21705)
CVE-2023-21705
-
High
Microsoft SQL Server CVE-2023-21713 Vulnerability (CVE-2023-21713)
CVE-2023-21713
-
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0974)
CVE-2020-0974
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0971)
CVE-2020-0971
CWE-434
High
SharePoint CVE-2023-21717 Vulnerability (CVE-2023-21717)
CVE-2023-21717
-
High
Microsoft SQL Server CVE-2023-21718 Vulnerability (CVE-2023-21718)
CVE-2023-21718
-
High
SharePoint CVE-2023-21742 Vulnerability (CVE-2023-21742)
CVE-2023-21742
-
High
PHP Address Book Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2778)
CVE-2013-2778
CWE-352
High
SharePoint CVE-2023-21744 Vulnerability (CVE-2023-21744)
CVE-2023-21744
-
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
CVE-2019-3894
CWE-264
High
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)
CVE-2019-4036
CWE-20
High
e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-50907)
CVE-2022-50907
CWE-434
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3394)
CVE-2019-3394
CWE-22
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-6420)
CVE-2013-6420
CWE-119
High
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11113)
CVE-2020-11113
CWE-502
High
concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11476)
CVE-2020-11476
CWE-434
High
WebLogic CVE-2019-2890 Vulnerability (CVE-2019-2890)
CVE-2019-2890
-
High
WebLogic CVE-2019-2891 Vulnerability (CVE-2019-2891)
CVE-2019-2891
-
High
OpenVPN AS Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2020-11462)
CVE-2020-11462
CWE-776
High
Oracle JRE CVE-2013-5802 Vulnerability (CVE-2013-5802)
CVE-2013-5802
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-42252)
CVE-2022-42252
-
High
Magento Improper Input Validation Vulnerability (CVE-2022-42344)
CVE-2022-42344
CWE-20
High
«
1
...
33
34
35
...
200
»