Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Joomla Other Vulnerability (CVE-2006-1047)
CVE-2006-1047
-
Critical
Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2018-11325)
CVE-2018-11325
CWE-209
Critical
PHP Other Vulnerability (CVE-2006-1017)
CVE-2006-1017
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-1884)
CVE-2006-1884
-
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13447)
CVE-2018-13447
CWE-138
Critical
Oracle Application Server CVE-2006-0290 Vulnerability (CVE-2006-0290)
CVE-2006-0290
-
Critical
Oracle Database Server CVE-2006-0291 Vulnerability (CVE-2006-0291)
CVE-2006-0291
-
Critical
Oracle Application Server CVE-2006-0291 Vulnerability (CVE-2006-0291)
CVE-2006-0291
-
Critical
Joomla Other Vulnerability (CVE-2006-0303)
CVE-2006-0303
-
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13449)
CVE-2018-13449
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13448)
CVE-2018-13448
CWE-138
Critical
Claroline Other Vulnerability (CVE-2006-0411)
CVE-2006-0411
-
Critical
PrestaShop Improper Authentication Vulnerability (CVE-2020-4074)
CVE-2020-4074
CWE-287
Critical
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-37094)
CVE-2020-37094
CWE-639
Critical
Magento Deserialization of Untrusted Data Vulnerability (CVE-2020-3716)
CVE-2020-3716
CWE-502
Critical
Magento CVE-2020-3718 Vulnerability (CVE-2020-3718)
CVE-2020-3718
-
Critical
PHP Use After Free Vulnerability (CVE-2018-12882)
CVE-2018-12882
CWE-416
Critical
ZenCart Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-0697)
CVE-2006-0697
CWE-264
Critical
Phusion Passenger Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12026)
CVE-2018-12026
CWE-59
Critical
Oracle Application Server Other Vulnerability (CVE-2006-1884)
CVE-2006-1884
-
Critical
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-7458)
CVE-2025-7458
CWE-190
Critical
Oracle Application Server CVE-2006-0289 Vulnerability (CVE-2006-0289)
CVE-2006-0289
-
Critical
Oracle Database Server CVE-2006-3703 Vulnerability (CVE-2006-3703)
CVE-2006-3703
-
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2020-7061)
CVE-2020-7061
CWE-125
Critical
Oracle Database Server CVE-2006-3698 Vulnerability (CVE-2006-3698)
CVE-2006-3698
-
Critical
Oracle Database Server CVE-2006-3699 Vulnerability (CVE-2006-3699)
CVE-2006-3699
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-3700)
CVE-2006-3700
-
Critical
Oracle Database Server CVE-2006-3701 Vulnerability (CVE-2006-3701)
CVE-2006-3701
-
Critical
Oracle Database Server CVE-2006-3702 Vulnerability (CVE-2006-3702)
CVE-2006-3702
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-3704)
CVE-2006-3704
-
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2020-7059)
CVE-2020-7059
CWE-125
Critical
Oracle Database Server CVE-2006-3705 Vulnerability (CVE-2006-3705)
CVE-2006-3705
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-3708)
CVE-2006-3708
-
Critical
PHP Improper Input Validation Vulnerability (CVE-2017-8923)
CVE-2017-8923
CWE-20
Critical
Oracle Application Server Other Vulnerability (CVE-2006-3710)
CVE-2006-3710
-
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-8917)
CVE-2017-8917
CWE-138
Critical
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2006-3738)
CVE-2006-3738
CWE-119
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2020-7060)
CVE-2020-7060
CWE-125
Critical
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-9119)
CVE-2017-9119
CWE-400
Critical
Sqlite Numeric Truncation Error Vulnerability (CVE-2025-6965)
CVE-2025-6965
CWE-197
Critical
Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-6754)
CVE-2020-6754
CWE-22
Critical
RubyGems Improper Verification of Cryptographic Signature Vulnerability (CVE-2018-1000076)
CVE-2018-1000076
CWE-347
Critical
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-9788)
CVE-2017-9788
CWE-200
Critical
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-9788)
CVE-2017-9788
CWE-20
Critical
ProjectSend Improper Input Validation Vulnerability (CVE-2017-9741)
CVE-2017-9741
CWE-20
Critical
Craft CMS Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-68456)
CVE-2025-68456
CWE-770
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-9435)
CVE-2017-9435
CWE-138
Critical
Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248)
CVE-2017-9248
CWE-522
Critical
PHP Integer Overflow or Wraparound Vulnerability (CVE-2017-9120)
CVE-2017-9120
CWE-190
Critical
PHP Out-of-bounds Write Vulnerability (CVE-2017-9228)
CVE-2017-9228
CWE-787
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2017-9227)
CVE-2017-9227
CWE-125
Critical
PHP Other Vulnerability (CVE-2006-3017)
CVE-2006-3017
-
Critical
PHP Out-of-bounds Write Vulnerability (CVE-2017-9226)
CVE-2017-9226
CWE-787
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2017-9224)
CVE-2017-9224
CWE-125
Critical
Moodle CVE-2025-67856 Vulnerability (CVE-2025-67856)
CVE-2025-67856
-
Critical
Oracle Database Server CVE-2006-0290 Vulnerability (CVE-2006-0290)
CVE-2006-0290
-
Critical
Oracle Application Server CVE-2006-0288 Vulnerability (CVE-2006-0288)
CVE-2006-0288
-
Critical
MediaWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2017-8809)
CVE-2017-8809
CWE-138
Critical
Joomla Other Vulnerability (CVE-2005-3773)
CVE-2005-3773
-
Critical
Oracle Application Server Other Vulnerability (CVE-2005-3452)
CVE-2005-3452
-
Critical
Oracle Application Server Other Vulnerability (CVE-2005-3453)
CVE-2005-3453
-
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-35613)
CVE-2020-35613
CWE-138
Critical
LimeSurvey Deserialization of Untrusted Data Vulnerability (CVE-2018-17057)
CVE-2018-17057
CWE-502
Critical
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16850)
CVE-2018-16850
CWE-138
Critical
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-16809)
CVE-2018-16809
CWE-138
Critical
Dotclear Other Vulnerability (CVE-2005-3957)
CVE-2005-3957
-
Critical
Oracle Application Server Other Vulnerability (CVE-2005-3450)
CVE-2005-3450
-
Critical
Ruby CVE-2018-16395 Vulnerability (CVE-2018-16395)
CVE-2018-16395
-
Critical
WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36155)
CVE-2020-36155
CWE-269
Critical
WordPress Ultimate Member Plugin CVE-2020-36157 Vulnerability (CVE-2020-36157)
CVE-2020-36157
-
Critical
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-15882)
CVE-2018-15882
CWE-434
Critical
Grafana Improper Authentication Vulnerability (CVE-2018-15727)
CVE-2018-15727
CWE-287
Critical
Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-23500)
CVE-2026-23500
CWE-138
Critical
Oracle Application Server Other Vulnerability (CVE-2005-3451)
CVE-2005-3451
-
Critical
Oracle Application Server Other Vulnerability (CVE-2005-3449)
CVE-2005-3449
-
Critical