Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-5424)
CVE-2016-5424
CWE-94
High
PostgreSQL NULL Pointer Dereference Vulnerability (CVE-2016-5423)
CVE-2016-5423
CWE-476
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5406)
CVE-2016-5406
CWE-264
High
PHP Out-of-bounds Write Vulnerability (CVE-2016-5399)
CVE-2016-5399
CWE-787
High
PHP Other Vulnerability (CVE-2016-4343)
CVE-2016-4343
-
High
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-4319)
CVE-2016-4319
CWE-352
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41307)
CVE-2021-41307
CWE-639
High
MySQL CVE-2016-3440 Vulnerability (CVE-2016-3440)
CVE-2016-3440
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)
CVE-2021-43824
CWE-476
High
Envoy Proxy Use After Free Vulnerability (CVE-2021-43825)
CVE-2021-43825
CWE-416
High
WebLogic CVE-2016-3505 Vulnerability (CVE-2016-3505)
CVE-2016-3505
-
High
Envoy Proxy Use After Free Vulnerability (CVE-2021-43826)
CVE-2021-43826
CWE-416
High
Atlassian Confluence Uncontrolled Search Path Element Vulnerability (CVE-2021-43940)
CVE-2021-43940
CWE-427
High
MySQL CVE-2016-3477 Vulnerability (CVE-2016-3477)
CVE-2016-3477
-
High
MySQL CVE-2016-3471 Vulnerability (CVE-2016-3471)
CVE-2016-3471
-
High
Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43944)
CVE-2021-43944
CWE-94
High
Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947)
CVE-2021-43947
-
High
Next.js CVE-2021-43803 Vulnerability (CVE-2021-43803)
CVE-2021-43803
-
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-3282)
CVE-2016-3282
CWE-119
High
PHP Improper Input Validation Vulnerability (CVE-2016-3185)
CVE-2016-3185
CWE-20
High
Drupal Data Processing Errors Vulnerability (CVE-2016-3171)
CVE-2016-3171
-
High
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3169)
CVE-2016-3169
CWE-264
High
Drupal Other Vulnerability (CVE-2016-3167)
CVE-2016-3167
-
High
Drupal Improper Access Control Vulnerability (CVE-2016-3165)
CVE-2016-3165
CWE-284
High
Drupal Other Vulnerability (CVE-2016-3164)
CVE-2016-3164
-
High
Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)
CVE-2016-3163
-
High
Oracle HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43818)
CVE-2021-43818
CWE-707
High
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-43798)
CVE-2021-43798
CWE-22
High
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)
CVE-2021-42340
CWE-772
High
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-4040)
CVE-2016-4040
CWE-138
High
PHP Numeric Errors Vulnerability (CVE-2016-4070)
CVE-2016-4070
-
High
Roundcube Cross-site Request Forgery (CSRF) Vulnerability (CVE-2016-4069)
CVE-2016-4069
-
High
Oracle HTTP Server Uncontrolled Recursion Vulnerability (CVE-2021-42717)
CVE-2021-42717
CWE-674
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4054)
CVE-2016-4054
CWE-119
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4052)
CVE-2016-4052
CWE-119
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4051)
CVE-2016-4051
CWE-119
High
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43281)
CVE-2021-43281
CWE-94
High
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-4041)
CVE-2016-4041
CWE-264
High
WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-4029)
CVE-2016-4029
CWE-918
High
PostgreSQL Improper Certificate Validation Vulnerability (CVE-2021-43766)
CVE-2021-43766
CWE-295
High
jQuery Validation Other Vulnerability (CVE-2021-43306)
CVE-2021-43306
-
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-3948)
CVE-2016-3948
CWE-119
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-3947)
CVE-2016-3947
CWE-119
High
Piwigo Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2016-3735)
CVE-2016-3735
CWE-335
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-3734)
CVE-2016-3734
CWE-352
High
ATutor Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2021-43498)
CVE-2021-43498
CWE-640
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43559)
CVE-2021-43559
CWE-352
High
Jenkins Other Vulnerability (CVE-2016-3726)
CVE-2016-3726
-
High
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)
CVE-2021-41312
CWE-287
High
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-41306)
CVE-2021-41306
CWE-639
High
PHP-Fusion Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-3172)
CVE-2021-3172
CWE-732
High
PostgreSQL Improper Access Control Vulnerability (CVE-2016-7048)
CVE-2016-7048
CWE-284
High
YOURLS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2021-3734)
CVE-2021-3734
CWE-1021
High
Jboss EAP Permission Issues Vulnerability (CVE-2016-7066)
CVE-2016-7066
-
High
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-7065)
CVE-2016-7065
CWE-502
High
Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3737)
CVE-2021-3737
CWE-400
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749)
CVE-2021-3749
CWE-400
High
OpenSSL Improper Access Control Vulnerability (CVE-2016-7054)
CVE-2016-7054
CWE-284
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7053)
CVE-2016-7053
CWE-476
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7052)
CVE-2016-7052
CWE-476
High
Moodle Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2016-7038)
CVE-2016-7038
CWE-640
High
Jboss EAP Files or Directories Accessible to External Parties Vulnerability (CVE-2021-3717)
CVE-2021-3717
CWE-552
High
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)
CVE-2016-6896
CWE-22
High
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6893)
CVE-2016-6893
CWE-352
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6817)
CVE-2016-6817
CWE-119
High
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-6816)
CVE-2016-6816
CWE-20
High
Apache Tomcat Incorrect Authorization Vulnerability (CVE-2016-6797)
CVE-2016-6797
CWE-863
High
Jboss EAP CVE-2016-6796 Vulnerability (CVE-2016-6796)
CVE-2016-6796
-
High
Undertow Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
CVE-2021-3859
CWE-668
High
Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6668)
CVE-2016-6668
CWE-200
High
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-7125)
CVE-2016-7125
CWE-138
High
PHP NULL Pointer Dereference Vulnerability (CVE-2016-7130)
CVE-2016-7130
CWE-476
High
MySQL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2016-6663)
CVE-2016-6663
CWE-362
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-7412)
CVE-2016-7412
CWE-119
High
ZenCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-3291)
CVE-2021-3291
CWE-138
High