Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
en
en
es
de
fr
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15552 vulnerabilities
in this category.
Critical: 1687
High: 4225
Medium: 8839
Low: 799
Information: 2
Vulnerability Name
CVE
CWE
Severity
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13588)
CVE-2020-13588
CWE-138
High
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13589)
CVE-2020-13589
CWE-138
High
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13590)
CVE-2020-13590
CWE-138
High
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13591)
CVE-2020-13591
CWE-138
High
Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-13592)
CVE-2020-13592
CWE-138
High
Sqlite Use After Free Vulnerability (CVE-2020-13630)
CVE-2020-13630
CWE-416
High
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-13654)
CVE-2020-13654
CWE-116
High
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13663)
CVE-2020-13663
CWE-352
High
Drupal Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2020-13664)
CVE-2020-13664
CWE-138
High
Drupal Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-13670)
CVE-2020-13670
CWE-668
High
Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-13671)
CVE-2020-13671
CWE-434
High
Drupal Improper Access Control Vulnerability (CVE-2020-13677)
CVE-2020-13677
CWE-284
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)
CVE-2020-13760
CWE-352
High
Joomla Improper Preservation of Permissions Vulnerability (CVE-2020-13763)
CVE-2020-13763
CWE-281
High
Sqlite Use After Free Vulnerability (CVE-2020-13871)
CVE-2020-13871
CWE-416
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-13934)
CVE-2020-13934
CWE-119
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2020-13935)
CVE-2020-13935
CWE-835
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-13950)
CVE-2020-13950
CWE-476
High
Squid NULL Pointer Dereference Vulnerability (CVE-2020-14058)
CVE-2020-14058
CWE-476
High
Atlassian Jira CVE-2020-14167 Vulnerability (CVE-2020-14167)
CVE-2020-14167
-
High
Atlassian Jira CVE-2020-14178 Vulnerability (CVE-2020-14178)
CVE-2020-14178
-
High
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-14209)
CVE-2020-14209
CWE-434
High
Moodle Incorrect Authorization Vulnerability (CVE-2020-14321)
CVE-2020-14321
CWE-863
High
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)
CVE-2020-14322
CWE-770
High
PostgreSQL Uncontrolled Search Path Element Vulnerability (CVE-2020-14349)
CVE-2020-14349
CWE-427
High
PostgreSQL Untrusted Search Path Vulnerability (CVE-2020-14350)
CVE-2020-14350
CWE-426
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14384)
CVE-2020-14384
CWE-400
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14443)
CVE-2020-14443
CWE-138
High
Oracle JRE CVE-2020-14583 Vulnerability (CVE-2020-14583)
CVE-2020-14583
-
High
WebLogic CVE-2020-14588 Vulnerability (CVE-2020-14588)
CVE-2020-14588
-
High
WebLogic CVE-2020-14589 Vulnerability (CVE-2020-14589)
CVE-2020-14589
-
High
Oracle JRE CVE-2020-14593 Vulnerability (CVE-2020-14593)
CVE-2020-14593
-
High
WebLogic CVE-2020-14639 Vulnerability (CVE-2020-14639)
CVE-2020-14639
-
High
MySQL CVE-2020-14663 Vulnerability (CVE-2020-14663)
CVE-2020-14663
-
High
MySQL CVE-2020-14678 Vulnerability (CVE-2020-14678)
CVE-2020-14678
-
High
MySQL CVE-2020-14697 Vulnerability (CVE-2020-14697)
CVE-2020-14697
-
High
WebLogic CVE-2020-14820 Vulnerability (CVE-2020-14820)
CVE-2020-14820
-
High
MySQL CVE-2020-14828 Vulnerability (CVE-2020-14828)
CVE-2020-14828
-
High
MySQL CVE-2020-14878 Vulnerability (CVE-2020-14878)
CVE-2020-14878
-
High
WebLogic CVE-2020-14883 Vulnerability (CVE-2020-14883)
CVE-2020-14883
-
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14960)
CVE-2020-14960
CWE-138
High
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-15012)
CVE-2020-15012
CWE-22
High
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15049)
CVE-2020-15049
CWE-444
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15072)
CVE-2020-15072
CWE-138
High
OpenVPN AS Insufficient Session Expiration Vulnerability (CVE-2020-15074)
CVE-2020-15074
CWE-613
High
PrestaShop Other Vulnerability (CVE-2020-15082)
CVE-2020-15082
-
High
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2020-15098)
CVE-2020-15098
CWE-502
High
TYPO3 Improper Input Validation Vulnerability (CVE-2020-15099)
CVE-2020-15099
CWE-20
High
Magento Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-15151)
CVE-2020-15151
-
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15252)
CVE-2020-15252
CWE-138
High
Python Uncontrolled Search Path Element Vulnerability (CVE-2020-15523)
CVE-2020-15523
CWE-427
High
Liferay Portal CVE-2020-15841 Vulnerability (CVE-2020-15841)
CVE-2020-15841
-
High
Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)
CVE-2020-15842
CWE-502
High
Liferay DXP Deserialization of Untrusted Data Vulnerability (CVE-2020-15842)
CVE-2020-15842
CWE-502
High
SharePoint Origin Validation Error Vulnerability (CVE-2020-16951)
CVE-2020-16951
CWE-346
High
SharePoint Origin Validation Error Vulnerability (CVE-2020-16952)
CVE-2020-16952
CWE-346
High
SharePoint CVE-2020-17016 Vulnerability (CVE-2020-17016)
CVE-2020-17016
-
High
SharePoint CVE-2020-17089 Vulnerability (CVE-2020-17089)
CVE-2020-17089
-
High
Apache Traffic Server Memory Disclosure Vulnerability (CVE-2020-17508)
CVE-2020-17508
-
High
Apache Traffic Server HTTP Request Smuggling Vulnerability (CVE-2020-17509 )
CVE-2020-17509
-
High
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-17527)
CVE-2020-17527
CWE-200
High
Dot CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-18875)
CVE-2020-18875
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19215)
CVE-2020-19215
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19216)
CVE-2020-19216
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19217)
CVE-2020-19217
CWE-138
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1023)
CVE-2020-1023
CWE-434
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1024)
CVE-2020-1024
CWE-434
High
SharePoint NULL Pointer Dereference Vulnerability (CVE-2020-1069)
CVE-2020-1069
CWE-476
High
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1102)
CVE-2020-1102
CWE-434
High
SharePoint Other Vulnerability (CVE-2020-1147)
CVE-2020-1147
-
High
SharePoint CVE-2020-1178 Vulnerability (CVE-2020-1178)
CVE-2020-1178
-
High
SharePoint CVE-2020-1181 Vulnerability (CVE-2020-1181)
CVE-2020-1181
-
High
SharePoint Download of Code Without Integrity Check Vulnerability (CVE-2020-1200)
CVE-2020-1200
CWE-494
High
SharePoint Download of Code Without Integrity Check Vulnerability (CVE-2020-1210)
CVE-2020-1210
CWE-494
High
SharePoint CVE-2020-1218 Vulnerability (CVE-2020-1218)
CVE-2020-1218
-
High
«
1
...
53
54
55
...
208
»