Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
Apache Tomcat Other Vulnerability (CVE-2002-0682)
CVE-2002-0682
-
High
Apache HTTP Server Other Vulnerability (CVE-2002-0661)
CVE-2002-0661
-
High
Ruby Numeric Errors Vulnerability (CVE-2008-2376)
CVE-2008-2376
-
High
PHP Out-of-bounds Write Vulnerability (CVE-2008-2371)
CVE-2008-2371
CWE-787
High
Dolibarr Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-31019)
CVE-2026-31019
CWE-138
High
Oracle HTTP Server Other Vulnerability (CVE-2002-0656)
CVE-2002-0656
-
High
Oracle Application Server Other Vulnerability (CVE-2002-0656)
CVE-2002-0656
-
High
Python Numeric Errors Vulnerability (CVE-2008-2316)
CVE-2008-2316
-
High
OpenSSL Other Vulnerability (CVE-2002-0656)
CVE-2002-0656
-
High
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2011-3336)
CVE-2011-3336
CWE-400
High
OpenSSL Other Vulnerability (CVE-2002-0655)
CVE-2002-0655
-
High
Oracle HTTP Server Other Vulnerability (CVE-2002-0655)
CVE-2002-0655
-
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-2315)
CVE-2008-2315
CWE-190
High
Apache Tomcat 7PK - Security Features Vulnerability (CVE-2002-0493)
CVE-2002-0493
-
High
Oracle Application Server Other Vulnerability (CVE-2002-0569)
CVE-2002-0569
-
High
Oracle Database Server Other Vulnerability (CVE-2002-0567)
CVE-2002-0567
-
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-59173)
CVE-2026-59173
CWE-400
High
Oracle Application Server Other Vulnerability (CVE-2002-0564)
CVE-2002-0564
-
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-31018)
CVE-2026-31018
CWE-94
High
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2146)
CVE-2008-2146
CWE-264
High
Oracle Application Server Other Vulnerability (CVE-2002-0561)
CVE-2002-0561
-
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-3379)
CVE-2011-3379
CWE-94
High
Envoy Proxy CVE-2024-45810 Vulnerability (CVE-2024-45810)
CVE-2024-45810
-
High
Jetty Sensitive Information in Resource Not Removed Before Reuse Vulnerability (CVE-2026-5795)
CVE-2026-5795
CWE-226
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-45809)
CVE-2024-45809
CWE-476
High
Oracle Application Server Other Vulnerability (CVE-2002-0559)
CVE-2002-0559
-
High
Envoy Proxy CVE-2024-45807 Vulnerability (CVE-2024-45807)
CVE-2024-45807
-
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433)
CVE-2008-4433
CWE-138
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-4785)
CVE-2006-4785
CWE-138
High
Internet Information Services Other Vulnerability (CVE-2000-0886)
CVE-2000-0886
-
High
Oracle Database Server CVE-2010-0860 Vulnerability (CVE-2010-0860)
CVE-2010-0860
-
High
WebLogic Improper Access Control Vulnerability (CVE-2026-35311)
CVE-2026-35311
CWE-284
High
axios Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-44495)
CVE-2026-44495
CWE-94
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-44496)
CVE-2026-44496
CWE-400
High
e107 Other Vulnerability (CVE-2005-3521)
CVE-2005-3521
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35303)
CVE-2026-35303
CWE-306
High
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35302)
CVE-2026-35302
CWE-601
High
OpenSSL Cryptographic Issues Vulnerability (CVE-2010-0742)
CVE-2010-0742
-
High
Liferay DXP Unchecked Input for Loop Condition Vulnerability (CVE-2025-43801)
CVE-2025-43801
CWE-606
High
Liferay Portal Unchecked Input for Loop Condition Vulnerability (CVE-2025-43801)
CVE-2025-43801
CWE-606
High
Next.js Incorrect Authorization Vulnerability (CVE-2026-44573)
CVE-2026-44573
CWE-863
High
Oracle Database Server CVE-2010-0853 Vulnerability (CVE-2010-0853)
CVE-2010-0853
-
High
OpenVPN AS Other Vulnerability (CVE-2005-3393)
CVE-2005-3393
-
High
PHP Other Vulnerability (CVE-2005-3392)
CVE-2005-3392
-
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44492)
CVE-2026-44492
CWE-918
High
PHP Other Vulnerability (CVE-2005-3391)
CVE-2005-3391
-
High
PHP Other Vulnerability (CVE-2005-3390)
CVE-2005-3390
-
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44574)
CVE-2026-44574
CWE-288
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44575)
CVE-2026-44575
CWE-288
High
Internet Information Services Improper Authentication Vulnerability (CVE-2009-1535)
CVE-2009-1535
CWE-287
High
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2006-20001)
CVE-2006-20001
CWE-787
High
Liferay DXP Uncontrolled Resource Consumption Vulnerability (CVE-2025-43796)
CVE-2025-43796
CWE-400
High
Liferay Portal Uncontrolled Resource Consumption Vulnerability (CVE-2025-43796)
CVE-2025-43796
CWE-400
High
Oracle Database Server CVE-2010-0903 Vulnerability (CVE-2010-0903)
CVE-2010-0903
-
High
Oracle Database Server CVE-2010-0911 Vulnerability (CVE-2010-0911)
CVE-2010-0911
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35299)
CVE-2026-35299
CWE-306
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-0956)
CVE-2010-0956
CWE-138
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1499)
CVE-2009-1499
CWE-138
High
axios Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-44494)
CVE-2026-44494
CWE-441
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-35439)
CVE-2026-35439
CWE-502
High
Chamilo Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2025-52469)
CVE-2025-52469
CWE-841
High
XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-51991)
CVE-2025-51991
CWE-94
High
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4855)
CVE-2009-4855
CWE-138
High
Mailman Other Vulnerability (CVE-2005-4153)
CVE-2005-4153
-
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1891)
CVE-2009-1891
CWE-400
High
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-5045)
CVE-2009-5045
CWE-200
High
MediaWiki Other Vulnerability (CVE-2005-4031)
CVE-2005-4031
-
High
Liferay DXP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-43813)
CVE-2025-43813
CWE-22
High
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-43813)
CVE-2025-43813
CWE-22
High
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1890)
CVE-2009-1890
CWE-400
High
Ruby Improper Input Validation Vulnerability (CVE-2009-5147)
CVE-2009-5147
CWE-20
High
Oracle Database Server Other Vulnerability (CVE-2006-1872)
CVE-2006-1872
-
High
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42945)
CVE-2026-42945
CWE-122
High
Apache Tomcat Improper Handling of Case Sensitivity Vulnerability (CVE-2026-43513)
CVE-2026-43513
CWE-178
High
Dotclear Other Vulnerability (CVE-2005-3963)
CVE-2005-3963
-
High