🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15395 vulnerabilities
in this category.
Critical: 1674
High: 4166
Medium: 8761
Low: 792
Information: 2
Vulnerability Name
CVE
CWE
Severity
WordPress Improper Input Validation Vulnerability (CVE-2017-1000600)
CVE-2017-1000600
CWE-20
High
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000504)
CVE-2017-1000504
CWE-352
High
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000499)
CVE-2017-1000499
CWE-352
High
WebLogic CVE-2017-10271 Vulnerability (CVE-2017-10271)
CVE-2017-10271
-
High
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-36132)
CVE-2021-36132
CWE-863
High
Vanilla Forums Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000432)
CVE-2017-1000432
CWE-352
High
phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-1000419)
CVE-2017-1000419
CWE-918
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-36160)
CVE-2021-36160
CWE-125
High
Moodle Uncontrolled Recursion Vulnerability (CVE-2021-36395)
CVE-2021-36395
CWE-674
High
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-36396)
CVE-2021-36396
CWE-918
High
Jenkins Improper Input Validation Vulnerability (CVE-2017-1000394)
CVE-2017-1000394
CWE-20
High
Jenkins Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-1000393)
CVE-2017-1000393
CWE-138
High
Magento CVE-2021-36021 Vulnerability (CVE-2021-36021)
CVE-2021-36021
-
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-35940)
CVE-2021-35940
CWE-125
High
ZenCart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-11675)
CVE-2017-11675
CWE-94
High
Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-10839)
CVE-2017-10839
CWE-138
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-11628)
CVE-2017-11628
CWE-119
High
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)
CVE-2017-11466
CWE-434
High
Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364)
CVE-2017-11364
CWE-295
High
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-11145)
CVE-2017-11145
CWE-200
High
PHP Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2017-11144)
CVE-2017-11144
CWE-754
High
PHP Deserialization of Untrusted Data Vulnerability (CVE-2017-11143)
CVE-2017-11143
CWE-502
High
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-11142)
CVE-2017-11142
CWE-400
High
Contao Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-10993)
CVE-2017-10993
CWE-22
High
MySQL CVE-2021-35610 Vulnerability (CVE-2021-35610)
CVE-2021-35610
-
High
Oracle HTTP Server CVE-2021-35666 Vulnerability (CVE-2021-35666)
CVE-2021-35666
-
High
Ruby Improper Authentication Vulnerability (CVE-2017-10784)
CVE-2017-10784
CWE-287
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10681)
CVE-2017-10681
CWE-352
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10680)
CVE-2017-10680
CWE-352
High
Piwigo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10679)
CVE-2017-10679
CWE-200
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10678)
CVE-2017-10678
CWE-352
High
GlassFish CVE-2017-10391 Vulnerability (CVE-2017-10391)
CVE-2017-10391
-
High
Oracle JRE CVE-2017-10388 Vulnerability (CVE-2017-10388)
CVE-2017-10388
-
High
WebLogic CVE-2021-35620 Vulnerability (CVE-2021-35620)
CVE-2021-35620
-
High
Oracle JRE CVE-2017-10309 Vulnerability (CVE-2017-10309)
CVE-2017-10309
-
High
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
CVE-2016-8610
CWE-400
High
Dot CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8600)
CVE-2016-8600
CWE-264
High
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15734)
CVE-2017-15734
CWE-352
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-4978)
CVE-2016-4978
CWE-502
High
Drupal Improper Access Control Vulnerability (CVE-2016-5385)
CVE-2016-5385
CWE-284
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5096)
CVE-2016-5096
CWE-190
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5095)
CVE-2016-5095
CWE-190
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5094)
CVE-2016-5094
CWE-190
High
PHP Out-of-bounds Read Vulnerability (CVE-2016-5093)
CVE-2016-5093
CWE-125
High
TYPO3 7PK - Security Features Vulnerability (CVE-2016-5091)
CVE-2016-5091
-
High
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-42097)
CVE-2021-42097
CWE-352
High
Apache HTTP Server Improper Access Control Vulnerability (CVE-2016-4979)
CVE-2016-4979
CWE-284
High
Masa CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-42183)
CVE-2021-42183
CWE-22
High
Apache HTTP Server CVE-2016-5387 Vulnerability (CVE-2016-5387)
CVE-2016-5387
-
High
Dot CMS Other Vulnerability (CVE-2016-4803)
CVE-2016-4803
-
High
CakePHP Improper Input Validation Vulnerability (CVE-2016-4793)
CVE-2016-4793
CWE-20
High
Squid Other Vulnerability (CVE-2016-4556)
CVE-2016-4556
-
High
Squid Improper Input Validation Vulnerability (CVE-2016-4555)
CVE-2016-4555
CWE-20
High
Squid Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-4554)
CVE-2016-4554
CWE-345
High
Squid Insufficient Verification of Data Authenticity Vulnerability (CVE-2016-4553)
CVE-2016-4553
CWE-345
High
Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4472)
CVE-2016-4472
CWE-119
High
Nginx Other Vulnerability (CVE-2016-4450)
CVE-2016-4450
-
High
PHP Improper Access Control Vulnerability (CVE-2016-5385)
CVE-2016-5385
CWE-284
High
Apache Tomcat Improper Access Control Vulnerability (CVE-2016-5388)
CVE-2016-5388
CWE-284
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4342)
CVE-2016-4342
CWE-119
High
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41799)
CVE-2021-41799
CWE-770
High
SharePoint CVE-2021-41344 Vulnerability (CVE-2021-41344)
CVE-2021-41344
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-41524)
CVE-2021-41524
CWE-476
High
MySQL CVE-2016-5625 Vulnerability (CVE-2016-5625)
CVE-2016-5625
-
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-41585)
CVE-2021-41585
CWE-20
High
Squid Improper Certificate Validation Vulnerability (CVE-2021-41611)
CVE-2021-41611
CWE-295
High
Oracle HTTP Server Other Vulnerability (CVE-2021-41617)
CVE-2021-41617
-
High
Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)
CVE-2021-41773
CWE-22
High
GlassFish CVE-2016-5519 Vulnerability (CVE-2016-5519)
CVE-2016-5519
-
High
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-41801)
CVE-2021-41801
CWE-863
High
Apache Traffic Server Resource Management Errors Vulnerability (CVE-2016-5396)
CVE-2016-5396
-
High
Ruby Other Vulnerability (CVE-2021-41817)
CVE-2021-41817
-
High
Ruby CVE-2021-41819 Vulnerability (CVE-2021-41819)
CVE-2021-41819
-
High
Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824)
CVE-2021-41824
CWE-1236
High
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-42040)
CVE-2021-42040
CWE-835
High
«
1
...
45
46
47
...
206
»