Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
e107 Other Vulnerability (CVE-2004-2042)
CVE-2004-2042
-
High
Chamilo Improper Privilege Management Vulnerability (CVE-2026-33706)
CVE-2026-33706
CWE-269
High
Oracle Application Server Other Vulnerability (CVE-2004-1774)
CVE-2004-1774
-
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-59775)
CVE-2025-59775
CWE-918
High
Drupal Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2025-31674)
CVE-2025-31674
CWE-913
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2025-5115)
CVE-2025-5115
CWE-400
High
Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2025-31650)
CVE-2025-31650
CWE-459
High
Oracle Application Server Other Vulnerability (CVE-2004-1707)
CVE-2004-1707
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-30762)
CVE-2025-30762
CWE-306
High
PHP Other Vulnerability (CVE-2006-4433)
CVE-2006-4433
-
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-33704)
CVE-2026-33704
CWE-434
High
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-3708)
CVE-2010-3708
CWE-20
High
Chamilo Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33702)
CVE-2026-33702
CWE-639
High
Joomla CVE-2026-48957 Vulnerability (CVE-2026-48957)
CVE-2026-48957
-
High
TYPO3 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2010-3668)
CVE-2010-3668
CWE-138
High
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
CVE-2008-5695
CWE-20
High
Oracle Database Server Incorrect Authorization Vulnerability (CVE-2025-30751)
CVE-2025-30751
CWE-863
High
phpMyAdmin Other Vulnerability (CVE-2004-2630)
CVE-2004-2630
-
High
Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-3419)
CVE-2010-3419
CWE-94
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59235)
CVE-2025-59235
CWE-125
High
Python Other Vulnerability (CVE-2005-0089)
CVE-2005-0089
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-59237)
CVE-2025-59237
CWE-502
High
phpList Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-6178)
CVE-2008-6178
CWE-94
High
CubeCart Insufficient Session Expiration Vulnerability (CVE-2025-59335)
CVE-2025-59335
CWE-613
High
Oracle Database Server CVE-2010-3600 Vulnerability (CVE-2010-3600)
CVE-2010-3600
-
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6124)
CVE-2008-6124
CWE-138
High
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111)
CVE-2006-4111
CWE-94
High
osCommerce Other Vulnerability (CVE-2004-2638)
CVE-2004-2638
-
High
phpMyAdmin Other Vulnerability (CVE-2004-2632)
CVE-2004-2632
-
High
XWikiplatform Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-32968)
CVE-2025-32968
CWE-138
High
phpMyAdmin Other Vulnerability (CVE-2004-2631)
CVE-2004-2631
-
High
Envoy Proxy Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2026-48706)
CVE-2026-48706
CWE-120
High
Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)
CVE-2026-48901
CWE-524
High
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)
CVE-2026-48743
-
High
Apache HTTP Server Other Vulnerability (CVE-2004-2343)
CVE-2004-2343
-
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-32873)
CVE-2025-32873
CWE-770
High
Joomla CVE-2026-48896 Vulnerability (CVE-2026-48896)
CVE-2026-48896
-
High
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-3662)
CVE-2010-3662
CWE-138
High
Ruby on Rails CVE-2006-4112 Vulnerability (CVE-2006-4112)
CVE-2006-4112
-
High
Joomla Improper Authentication Vulnerability (CVE-2026-48897)
CVE-2026-48897
CWE-287
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5946)
CVE-2008-5946
CWE-138
High
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-3663)
CVE-2010-3663
CWE-434
High
Moodle Other Vulnerability (CVE-2004-2232)
CVE-2004-2232
-
High
PHP Configuration Vulnerability (CVE-2008-5844)
CVE-2008-5844
-
High
EspoCRM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-32390)
CVE-2025-32390
CWE-138
High
MediaWiki Other Vulnerability (CVE-2004-2186)
CVE-2004-2186
-
High
Joomla CVE-2026-48958 Vulnerability (CVE-2026-48958)
CVE-2026-48958
-
High
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3714)
CVE-2010-3714
CWE-264
High
SharePoint CVE-2025-59228 Vulnerability (CVE-2025-59228)
CVE-2025-59228
-
High
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-29087)
CVE-2025-29087
CWE-190
High
Apache HTTP Server Other Vulnerability (CVE-2004-1082)
CVE-2004-1082
-
High
MongoDb Double Free Vulnerability (CVE-2026-4358)
CVE-2026-4358
CWE-415
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-4476)
CVE-2006-4476
CWE-264
High
MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29457)
CVE-2025-29457
CWE-918
High
Python Integer Overflow or Wraparound Vulnerability (CVE-2008-4864)
CVE-2008-4864
CWE-190
High
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29452)
CVE-2025-29452
CWE-918
High
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29451)
CVE-2025-29451
CWE-918
High
Angular Origin Validation Error Vulnerability (CVE-2026-50168)
CVE-2026-50168
CWE-346
High
PHP Other Vulnerability (CVE-2006-4481)
CVE-2006-4481
-
High
Drupal CVE-2008-4793 Vulnerability (CVE-2008-4793)
CVE-2008-4793
-
High
Angular Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-50170)
CVE-2026-50170
CWE-524
High
Apache HTTP Server Incorrect Calculation of Buffer Size Vulnerability (CVE-2004-0940)
CVE-2004-0940
CWE-131
High
OpenSSL Improper Authentication Vulnerability (CVE-2010-4252)
CVE-2010-4252
CWE-287
High
Apache HTTP Server Other Vulnerability (CVE-2004-0885)
CVE-2004-0885
-
High
Mailman Other Vulnerability (CVE-2004-1143)
CVE-2004-1143
-
High
Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4269)
CVE-2010-4269
CWE-138
High
e107 Other Vulnerability (CVE-2006-4548)
CVE-2006-4548
-
High
MySQL Other Vulnerability (CVE-2004-0835)
CVE-2004-0835
-
High
Apache HTTP Server Other Vulnerability (CVE-2004-0811)
CVE-2004-0811
-
High
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2025-27747)
CVE-2025-27747
CWE-822
High
CakePHP Improper Input Validation Vulnerability (CVE-2010-4335)
CVE-2010-4335
CWE-20
High
Squid Use After Free Vulnerability (CVE-2026-33526)
CVE-2026-33526
CWE-416
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-61752)
CVE-2025-61752
CWE-306
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4625)
CVE-2008-4625
CWE-138
High
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33382)
CVE-2026-33382
CWE-400
High