Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
Perl Out-of-bounds Write Vulnerability (CVE-2018-6797)
CVE-2018-6797
CWE-787
Critical
Dotclear Other Vulnerability (CVE-2005-3957)
CVE-2005-3957
-
Critical
Apache Tomcat Improper Authorization Vulnerability (CVE-2026-43515)
CVE-2026-43515
CWE-285
Critical
Oracle Database Server CVE-2014-6567 Vulnerability (CVE-2014-6567)
CVE-2014-6567
-
Critical
Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42120)
CVE-2022-42120
CWE-138
Critical
Jenkins Missing Authorization Vulnerability (CVE-2021-21685)
CVE-2021-21685
CWE-862
Critical
PostgreSQL Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-1115)
CVE-2018-1115
CWE-732
Critical
OpenVPN AS Other Vulnerability (CVE-2006-1629)
CVE-2006-1629
-
Critical
Apache HTTP Server Improper Authentication Vulnerability (CVE-2018-1312)
CVE-2018-1312
CWE-287
Critical
Oracle Database Server CVE-2014-6467 Vulnerability (CVE-2014-6467)
CVE-2014-6467
-
Critical
Oracle Database Server CVE-2014-6455 Vulnerability (CVE-2014-6455)
CVE-2014-6455
-
Critical
Oracle Database Server CVE-2014-6453 Vulnerability (CVE-2014-6453)
CVE-2014-6453
-
Critical
SharePoint Other Vulnerability (CVE-2014-6357)
CVE-2014-6357
-
Critical
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4030)
CVE-2011-4030
CWE-264
Critical
IBM WebSEAL CVE-2018-1722 Vulnerability (CVE-2018-1722)
CVE-2018-1722
-
Critical
WebLogic CVE-2021-21350 Vulnerability (CVE-2021-21350)
CVE-2021-21350
-
Critical
WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21347)
CVE-2021-21347
CWE-434
Critical
Joomla Other Vulnerability (CVE-2006-1047)
CVE-2006-1047
-
Critical
Oracle Database Server Other Vulnerability (CVE-2006-1867)
CVE-2006-1867
-
Critical
PrestaShop Improper Authentication Vulnerability (CVE-2021-21308)
CVE-2021-21308
CWE-287
Critical
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-42009)
CVE-2024-42009
CWE-707
Critical
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-42008)
CVE-2024-42008
CWE-707
Critical
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-42005)
CVE-2024-42005
CWE-138
Critical
PHP Other Vulnerability (CVE-2006-1017)
CVE-2006-1017
-
Critical
Liferay DXP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42120)
CVE-2022-42120
CWE-138
Critical
OpenSSL Resource Management Errors Vulnerability (CVE-2011-4109)
CVE-2011-4109
-
Critical
Ruby Inadequate Encryption Strength Vulnerability (CVE-2011-4121)
CVE-2011-4121
CWE-326
Critical
Joomla Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-40383)
CVE-2026-40383
CWE-22
Critical
Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21025)
CVE-2021-21025
CWE-91
Critical
Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-21024)
CVE-2021-21024
CWE-138
Critical
Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21019)
CVE-2021-21019
CWE-91
Critical
Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-21018)
CVE-2021-21018
CWE-138
Critical
Oracle Database Server CVE-2006-1866 Vulnerability (CVE-2006-1866)
CVE-2006-1866
-
Critical
HSQLDB CVE-2022-41853 Vulnerability (CVE-2022-41853)
CVE-2022-41853
-
Critical
Apache Tomcat Improper Input Validation Vulnerability (CVE-2026-41293)
CVE-2026-41293
CWE-20
Critical
Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21691)
CVE-2021-21691
CWE-59
Critical
Oracle Database Server CVE-2014-6560 Vulnerability (CVE-2014-6560)
CVE-2014-6560
-
Critical
Jenkins Missing Authorization Vulnerability (CVE-2021-21694)
CVE-2021-21694
CWE-862
Critical
Artifactory Insufficient Verification of Data Authenticity Vulnerability (CVE-2018-19971)
CVE-2018-19971
CWE-345
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-35221)
CVE-2026-35221
CWE-138
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-35222)
CVE-2026-35222
CWE-138
Critical
Joomla CVE-2026-35223 Vulnerability (CVE-2026-35223)
CVE-2026-35223
-
Critical
Jenkins Improper Authorization Vulnerability (CVE-2021-21693)
CVE-2021-21693
CWE-285
Critical
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21692)
CVE-2021-21692
CWE-22
Critical
Jenkins Incorrect Authorization Vulnerability (CVE-2021-21692 )
CVE-2021-21692
CWE-863
Critical
WebLogic Improper Access Control Vulnerability (CVE-2026-35263)
CVE-2026-35263
CWE-284
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35292)
CVE-2026-35292
CWE-306
Critical
Oracle Database Server CVE-2014-6546 Vulnerability (CVE-2014-6546)
CVE-2014-6546
-
Critical
WebLogic Improper Access Control Vulnerability (CVE-2026-35298)
CVE-2026-35298
CWE-284
Critical
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2026-35300)
CVE-2026-35300
CWE-502
Critical
Oracle Database Server Other Vulnerability (CVE-2006-1869)
CVE-2006-1869
-
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35301)
CVE-2026-35301
CWE-306
Critical
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21690)
CVE-2021-21690
CWE-22
Critical
Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21690 )
CVE-2021-21690
CWE-693
Critical
Jenkins Other Vulnerability (CVE-2021-21689)
CVE-2021-21689
-
Critical
Oracle Database Server CVE-2014-6545 Vulnerability (CVE-2014-6545)
CVE-2014-6545
-
Critical
Jenkins Missing Authorization Vulnerability (CVE-2021-21687)
CVE-2021-21687
CWE-862
Critical
Oracle Database Server Other Vulnerability (CVE-2006-1884)
CVE-2006-1884
-
Critical
Oracle Application Server Other Vulnerability (CVE-2006-1884)
CVE-2006-1884
-
Critical
WeBid Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-41477)
CVE-2022-41477
CWE-918
Critical
Oracle Database Server CVE-2006-1876 Vulnerability (CVE-2006-1876)
CVE-2006-1876
-
Critical
Oracle Database Server CVE-2006-1875 Vulnerability (CVE-2006-1875)
CVE-2006-1875
-
Critical
Oracle Database Server CVE-2006-1873 Vulnerability (CVE-2006-1873)
CVE-2006-1873
-
Critical
Oracle Database Server CVE-2006-1870 Vulnerability (CVE-2006-1870)
CVE-2006-1870
-
Critical
Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-21016)
CVE-2021-21016
CWE-138
Critical
Apache Traffic Server Improper Access Control Vulnerability (CVE-2026-41920)
CVE-2026-41920
CWE-284
Critical
PHP Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2024-3566)
CVE-2024-3566
CWE-138
Critical
WP Plugin Contact Form 7 CVE-2018-20979 Vulnerability (CVE-2018-20979)
CVE-2018-20979
-
Critical
Oracle Database Server CVE-2006-0262 Vulnerability (CVE-2006-0262)
CVE-2006-0262
-
Critical
Oracle Database Server CVE-2006-0261 Vulnerability (CVE-2006-0261)
CVE-2006-0261
-
Critical
Oracle Database Server CVE-2006-0260 Vulnerability (CVE-2006-0260)
CVE-2006-0260
-
Critical
Oracle Database Server CVE-2006-0259 Vulnerability (CVE-2006-0259)
CVE-2006-0259
-
Critical
Oracle Database Server CVE-2006-0258 Vulnerability (CVE-2006-0258)
CVE-2006-0258
-
Critical
Oracle Database Server CVE-2006-0257 Vulnerability (CVE-2006-0257)
CVE-2006-0257
-
Critical
Oracle Database Server CVE-2006-0256 Vulnerability (CVE-2006-0256)
CVE-2006-0256
-
Critical