🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15395 vulnerabilities
in this category.
Critical: 1674
High: 4166
Medium: 8761
Low: 792
Information: 2
Vulnerability Name
CVE
CWE
Severity
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-31857)
CVE-2026-31857
CWE-94
High
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-31790)
CVE-2026-31790
CWE-754
High
LiteSpeed Web Server Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-31386)
CVE-2026-31386
CWE-138
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-64458)
CVE-2025-64458
CWE-407
High
Zope Web Application Server Other Vulnerability (CVE-2002-0688)
CVE-2002-0688
-
High
Apache HTTP Server Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2024-47252)
CVE-2024-47252
CWE-150
High
Apache HTTP Server Other Vulnerability (CVE-2002-0843)
CVE-2002-0843
-
High
Mailman Other Vulnerability (CVE-2002-0855)
CVE-2002-0855
-
High
SharePoint Improper Authorization Vulnerability (CVE-2026-58277)
CVE-2026-58277
CWE-285
High
SharePoint CVE-2024-49068 Vulnerability (CVE-2024-49068)
CVE-2024-49068
-
High
PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2002-0985)
CVE-2002-0985
CWE-707
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-58182)
CVE-2026-58182
CWE-400
High
Joomla Other Vulnerability (CVE-2006-7008)
CVE-2006-7008
-
High
Plone CMS CVE-2011-2528 Vulnerability (CVE-2011-2528)
CVE-2011-2528
-
High
Zope Web Application Server CVE-2011-2528 Vulnerability (CVE-2011-2528)
CVE-2011-2528
-
High
Joomla Other Vulnerability (CVE-2006-7009)
CVE-2006-7009
-
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-49767)
CVE-2024-49767
CWE-770
High
Ruby Resource Management Errors Vulnerability (CVE-2008-2664)
CVE-2008-2664
-
High
SharePoint CVE-2024-49070 Vulnerability (CVE-2024-49070)
CVE-2024-49070
-
High
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2687)
CVE-2011-2687
CWE-264
High
Joomla Other Vulnerability (CVE-2006-7010)
CVE-2006-7010
-
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58183)
CVE-2026-58183
CWE-20
High
Moodle Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62399)
CVE-2025-62399
CWE-307
High
Oracle Application Server Other Vulnerability (CVE-2002-0947)
CVE-2002-0947
-
High
Chamilo Session Fixation Vulnerability (CVE-2026-31940)
CVE-2026-31940
CWE-384
High
Claroline Other Vulnerability (CVE-2006-7048)
CVE-2006-7048
-
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2026-31958)
CVE-2026-31958
CWE-400
High
Piwigo Use of Insufficiently Random Values Vulnerability (CVE-2024-48928)
CVE-2024-48928
CWE-330
High
Drupal Incorrect Authorization Vulnerability (CVE-2011-2726)
CVE-2011-2726
CWE-863
High
Piwigo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2025-62406)
CVE-2025-62406
CWE-640
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
CVE-2025-62409
CWE-476
High
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58184)
CVE-2026-58184
CWE-787
High
Internet Information Services Other Vulnerability (CVE-2002-0869)
CVE-2002-0869
-
High
Internet Information Services Other Vulnerability (CVE-2002-0862)
CVE-2002-0862
-
High
Oracle Database Server Other Vulnerability (CVE-2002-0857)
CVE-2002-0857
-
High
Envoy Proxy Use After Free Vulnerability (CVE-2025-62504)
CVE-2025-62504
CWE-416
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58186)
CVE-2026-58186
CWE-20
High
Apache Tomcat Other Vulnerability (CVE-2006-7197)
CVE-2006-7197
-
High
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)
CVE-2011-3190
CWE-264
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2011-3192)
CVE-2011-3192
CWE-400
High
Internet Information Services Other Vulnerability (CVE-2002-0074)
CVE-2002-0074
-
High
Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-45398)
CVE-2024-45398
CWE-434
High
Apache HTTP Server CVE-2002-0392 Vulnerability (CVE-2002-0392)
CVE-2002-0392
-
High
Oracle Database Server Improper Privilege Management Vulnerability (CVE-2026-60175)
CVE-2026-60175
CWE-269
High
Moodle Incorrect Default Permissions Vulnerability (CVE-2024-45690)
CVE-2024-45690
CWE-276
High
Mailman Other Vulnerability (CVE-2002-0388)
CVE-2002-0388
-
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60196)
CVE-2026-60196
CWE-284
High
Internet Information Services Other Vulnerability (CVE-2002-0364)
CVE-2002-0364
-
High
Apache HTTP Server Other Vulnerability (CVE-2002-0257)
CVE-2002-0257
-
High
PHP Other Vulnerability (CVE-2002-0229)
CVE-2002-0229
-
High
Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3613)
CVE-2011-3613
CWE-200
High
Zope Web Application Server Other Vulnerability (CVE-2002-0170)
CVE-2002-0170
-
High
Joomla Inadequate Encryption Strength Vulnerability (CVE-2011-3629)
CVE-2011-3629
CWE-326
High
Microsoft SQL Server Other Vulnerability (CVE-2002-0154)
CVE-2002-0154
-
High
Internet Information Services Other Vulnerability (CVE-2002-0150)
CVE-2002-0150
-
High
Internet Information Services Other Vulnerability (CVE-2002-0149)
CVE-2002-0149
-
High
Squid CVE-2024-45802 Vulnerability (CVE-2024-45802)
CVE-2024-45802
-
High
Internet Information Services Other Vulnerability (CVE-2002-0148)
CVE-2002-0148
-
High
Django CVE-2024-45230 Vulnerability (CVE-2024-45230)
CVE-2024-45230
-
High
SharePoint CVE-2024-43503 Vulnerability (CVE-2024-43503)
CVE-2024-43503
-
High
Internet Information Services Other Vulnerability (CVE-2002-0147)
CVE-2002-0147
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60201)
CVE-2026-60201
CWE-306
High
SharePoint CVE-2024-43466 Vulnerability (CVE-2024-43466)
CVE-2024-43466
-
High
mod_ssl Other Vulnerability (CVE-2002-0082)
CVE-2002-0082
-
High
PHP Other Vulnerability (CVE-2002-0081)
CVE-2002-0081
-
High
SharePoint CVE-2024-43464 Vulnerability (CVE-2024-43464)
CVE-2024-43464
-
High
Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-43440)
CVE-2024-43440
CWE-22
High
Internet Information Services Other Vulnerability (CVE-2002-0079)
CVE-2002-0079
-
High
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-43438)
CVE-2024-43438
CWE-639
High
Internet Information Services Other Vulnerability (CVE-2002-0075)
CVE-2002-0075
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60153)
CVE-2026-60153
CWE-306
High
GlassFish CVE-2011-3559 Vulnerability (CVE-2011-3559)
CVE-2011-3559
-
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-64460)
CVE-2025-64460
CWE-407
High
Oracle Application Server Other Vulnerability (CVE-2002-0655)
CVE-2002-0655
-
High
Next.js Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-46982)
CVE-2024-46982
CWE-639
High
«
1
...
58
59
60
...
206
»