Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)
CVE-2019-4036
CWE-20
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
CVE-2019-3894
CWE-264
High
Moodle Improper Privilege Management Vulnerability (CVE-2019-3849)
CVE-2019-3849
CWE-269
High
Moodle Improper Input Validation Vulnerability (CVE-2019-3847)
CVE-2019-3847
CWE-20
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2019-3823)
CVE-2019-3823
CWE-125
High
Dot CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-18875)
CVE-2020-18875
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19215)
CVE-2020-19215
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19216)
CVE-2020-19216
CWE-138
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502)
CVE-2021-20502
CWE-611
High
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151)
CVE-2018-20151
CWE-200
High
Drupal Improper Access Control Vulnerability (CVE-2016-3162)
CVE-2016-3162
CWE-284
High
Dolibarr Incorrect Authorization Vulnerability (CVE-2021-37517)
CVE-2021-37517
CWE-863
High
Roundcube Improper Access Control Vulnerability (CVE-2016-9920)
CVE-2016-9920
CWE-284
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37148)
CVE-2021-37148
CWE-20
High
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-9864)
CVE-2016-9864
CWE-138
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-9863)
CVE-2016-9863
CWE-20
High
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-9862)
CVE-2016-9862
CWE-94
High
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9861)
CVE-2016-9861
-
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37149)
CVE-2021-37149
CWE-20
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37150)
CVE-2021-37150
CWE-20
High
Contao Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-37626)
CVE-2021-37626
CWE-94
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37147)
CVE-2021-37147
CWE-20
High
Contao Improper Privilege Management Vulnerability (CVE-2021-37627)
CVE-2021-37627
CWE-269
High
Apache Traffic Server Improper Authentication Vulnerability (CVE-2021-38161)
CVE-2021-38161
CWE-287
High
MySQL CVE-2016-9842 Vulnerability (CVE-2016-9842)
CVE-2016-9842
-
High
MySQL CVE-2016-9840 Vulnerability (CVE-2016-9840)
CVE-2016-9840
-
High
Joomla Improper Access Control Vulnerability (CVE-2016-9838)
CVE-2016-9838
CWE-284
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9837)
CVE-2016-9837
CWE-264
High
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9775)
CVE-2016-9775
CWE-264
High
Apache Tomcat Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-9774)
CVE-2016-9774
CWE-59
High
PHP NULL Pointer Dereference Vulnerability (CVE-2016-9934)
CVE-2016-9934
CWE-476
High
ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0247)
CVE-2017-0247
CWE-20
High
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-9707)
CVE-2016-9707
CWE-611
High
RubyGems Improper Input Validation Vulnerability (CVE-2017-0901)
CVE-2017-0901
CWE-20
High
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-1000067)
CVE-2017-1000067
CWE-138
High
GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000029)
CVE-2017-1000029
CWE-200
High
GlassFish Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-1000028)
CVE-2017-1000028
CWE-22
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000018)
CVE-2017-1000018
CWE-20
High
phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-1000017)
CVE-2017-1000017
CWE-918
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000016)
CVE-2017-1000016
CWE-20
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000014)
CVE-2017-1000014
CWE-20
High
RubyGems Origin Validation Error Vulnerability (CVE-2017-0902)
CVE-2017-0902
CWE-346
High
RubyGems Improper Input Validation Vulnerability (CVE-2017-0900)
CVE-2017-0900
CWE-20
High
ASP.NET MVC Improper Input Validation Vulnerability (CVE-2017-0249)
CVE-2017-0249
CWE-20
High
MediaWiki CVE-2017-0371 Vulnerability (CVE-2017-0371)
CVE-2017-0371
-
High
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-0367)
CVE-2017-0367
CWE-668
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-36625)
CVE-2021-36625
CWE-138
High
Sqlite CVE-2021-36690 Vulnerability (CVE-2021-36690)
CVE-2021-36690
-
High
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-0362)
CVE-2017-0362
CWE-352
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-0361)
CVE-2017-0361
CWE-200
High
SharePoint CVE-2017-0281 Vulnerability (CVE-2017-0281)
CVE-2017-0281
-
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-0254)
CVE-2017-0254
CWE-119
High
Serendipity Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-9752)
CVE-2016-9752
CWE-918
High
Liferay Portal CVE-2021-38266 Vulnerability (CVE-2021-38266)
CVE-2021-38266
-
High
Jenkins Improper Authentication Vulnerability (CVE-2017-1000354)
CVE-2017-1000354
CWE-287
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8904)
CVE-2016-8904
CWE-138
High
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)
CVE-2021-39206
CWE-863
High
Grafana Improper Authentication Vulnerability (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9127)
CVE-2016-9127
CWE-352
High
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9014)
CVE-2016-9014
CWE-264
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8908)
CVE-2016-8908
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8907)
CVE-2016-8907
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8906)
CVE-2016-8906
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8905)
CVE-2016-8905
CWE-138
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8903)
CVE-2016-8903
CWE-138
High
Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9187)
CVE-2016-9187
CWE-434
High
Joomla Improper Input Validation Vulnerability (CVE-2016-8870)
CVE-2016-8870
CWE-20
High
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-8747)
CVE-2016-8747
CWE-200
High
Apache Tomcat 7PK - Errors Vulnerability (CVE-2016-8745)
CVE-2016-8745
-
High
Apache HTTP Server CVE-2016-8743 Vulnerability (CVE-2016-8743)
CVE-2016-8743
-
High
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-8740)
CVE-2016-8740
-
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)
CVE-2016-8657
CWE-264
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8656)
CVE-2016-8656
CWE-264
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
CVE-2016-8610
CWE-400
High
Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9186)
CVE-2016-9186
CWE-434
High