Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-64901)
CVE-2026-64901
CWE-502
High
Apache Tomcat Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-29146)
CVE-2026-29146
CWE-209
High
SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-64921)
CVE-2026-64921
CWE-306
High
Next.js Improper Authorization Vulnerability (CVE-2026-64642)
CVE-2026-64642
CWE-285
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2024-39693)
CVE-2024-39693
CWE-400
High
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-67847)
CVE-2025-67847
CWE-94
High
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-39614)
CVE-2024-39614
CWE-130
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-39573)
CVE-2024-39573
CWE-20
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)
CVE-2024-39338
CWE-918
High
Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability (CVE-2025-67848)
CVE-2025-67848
CWE-280
High
MySQL Other Vulnerability (CVE-2000-0981)
CVE-2000-0981
-
High
LimeSurvey Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-39063)
CVE-2024-39063
CWE-352
High
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-38875)
CVE-2024-38875
CWE-130
High
GeoServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-38524)
CVE-2024-38524
CWE-200
High
Apache Traffic Server CVE-2024-38479 Vulnerability (CVE-2024-38479)
CVE-2024-38479
-
High
Internet Information Services Other Vulnerability (CVE-2000-0970)
CVE-2000-0970
-
High
Beego Framework Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2024-40465)
CVE-2024-40465
CWE-327
High
Zope Web Application Server Other Vulnerability (CVE-2000-1211)
CVE-2000-1211
-
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60530)
CVE-2026-60530
CWE-269
High
Python Incorrect Conversion between Numeric Types Vulnerability (CVE-2008-1721)
CVE-2008-1721
CWE-681
High
WebLogic Improper Authentication Vulnerability (CVE-2026-60679)
CVE-2026-60679
CWE-287
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60680)
CVE-2026-60680
CWE-284
High
Oracle Application Server Other Vulnerability (CVE-2001-0591)
CVE-2001-0591
-
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60699)
CVE-2026-60699
CWE-284
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0542)
CVE-2001-0542
-
High
Oracle JRE Improper Access Control Vulnerability (CVE-2026-62574)
CVE-2026-62574
CWE-284
High
Internet Information Services Other Vulnerability (CVE-2001-0507)
CVE-2001-0507
-
High
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2026-2327)
CVE-2026-2327
CWE-1333
High
Internet Information Services Other Vulnerability (CVE-2001-0506)
CVE-2001-0506
-
High
phpMyAdmin Other Vulnerability (CVE-2001-0478)
CVE-2001-0478
-
High
Oracle Application Server Other Vulnerability (CVE-2001-0419)
CVE-2001-0419
-
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-2007)
CVE-2026-2007
CWE-122
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0344)
CVE-2001-0344
-
High
PostgreSQL Improper Validation of Array Index Vulnerability (CVE-2026-2006)
CVE-2026-2006
CWE-129
High
Next.js Excessive Iteration Vulnerability (CVE-2026-64641)
CVE-2026-64641
CWE-834
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-2005)
CVE-2026-2005
CWE-122
High
Internet Information Services Other Vulnerability (CVE-2001-0333)
CVE-2001-0333
-
High
SharePoint Improper Authentication Vulnerability (CVE-2026-62827)
CVE-2026-62827
CWE-287
High
PostgreSQL Improper Validation of Specified Type of Input Vulnerability (CVE-2026-2004)
CVE-2026-2004
CWE-1287
High
Oracle HTTP Server Other Vulnerability (CVE-2007-0279)
CVE-2007-0279
-
High
Oracle Application Server CVE-2007-0280 Vulnerability (CVE-2007-0280)
CVE-2007-0280
-
High
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-67486)
CVE-2025-67486
CWE-138
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-40597)
CVE-2024-40597
CWE-200
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63514)
CVE-2026-63514
CWE-502
High
Jenkins Improper Resource Shutdown or Release Vulnerability (CVE-2025-67635)
CVE-2025-67635
CWE-404
High
OpenSSL Cryptographic Issues Vulnerability (CVE-2000-1254)
CVE-2000-1254
-
High
Oracle Application Server Other Vulnerability (CVE-2000-1236)
CVE-2000-1236
-
High
SharePoint Improper Input Validation Vulnerability (CVE-2026-63520)
CVE-2026-63520
CWE-20
High
Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-43434)
CVE-2024-43434
CWE-22
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-43436)
CVE-2024-43436
CWE-138
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2024-50305)
CVE-2024-50305
CWE-20
High
Next.js Uncontrolled Recursion Vulnerability (CVE-2024-47831)
CVE-2024-47831
CWE-674
High
phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-62519)
CVE-2025-62519
CWE-138
High
Oracle Database Server Other Vulnerability (CVE-2002-0843)
CVE-2002-0843
-
High
Oracle Application Server Other Vulnerability (CVE-2002-0843)
CVE-2002-0843
-
High
Oracle Application Server Other Vulnerability (CVE-2002-0842)
CVE-2002-0842
-
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58187)
CVE-2026-58187
CWE-787
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2930)
CVE-2011-2930
CWE-138
High
SharePoint Use After Free Vulnerability (CVE-2025-62555)
CVE-2025-62555
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-62558)
CVE-2025-62558
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-62559)
CVE-2025-62559
CWE-416
High
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-48311)
CVE-2024-48311
CWE-352
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58188)
CVE-2026-58188
CWE-787
High
SharePoint Use After Free Vulnerability (CVE-2025-62562)
CVE-2025-62562
CWE-416
High
Chamilo Deserialization of Untrusted Data Vulnerability (CVE-2024-47886)
CVE-2024-47886
CWE-502
High
Apache Traffic Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58189)
CVE-2026-58189
CWE-918
High
Chamilo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-31939)
CVE-2026-31939
CWE-22
High
Apache HTTP Server CVE-2002-0839 Vulnerability (CVE-2002-0839)
CVE-2002-0839
-
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130)
CVE-2011-3130
CWE-138
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849)
CVE-2012-5849
CWE-138
High
Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-31858)
CVE-2026-31858
CWE-138
High
PostgreSQL Other Vulnerability (CVE-2002-0802)
CVE-2002-0802
-
High
PHP Other Vulnerability (CVE-2002-0717)
CVE-2002-0717
-
High
WebLogic CVE-2008-2579 Vulnerability (CVE-2008-2579)
CVE-2008-2579
-
High