Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
phpMyFAQ CVE-2026-24422 Vulnerability (CVE-2026-24422)
CVE-2026-24422
-
High
Skipper Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-24470)
CVE-2026-24470
CWE-441
High
Apache Tomcat CVE-2026-24734 Vulnerability (CVE-2026-24734)
CVE-2026-24734
-
High
Joomla Other Vulnerability (CVE-2005-3772)
CVE-2005-3772
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-24880)
CVE-2026-24880
-
High
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-22016)
CVE-2026-22016
CWE-200
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-0146)
CVE-2006-0146
CWE-138
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-14550)
CVE-2025-14550
CWE-407
High
Oracle Database Server Other Vulnerability (CVE-2006-0552)
CVE-2006-0552
-
High
PHP NULL Pointer Dereference Vulnerability (CVE-2025-14180)
CVE-2025-14180
CWE-476
High
PHP Integer Overflow or Wraparound Vulnerability (CVE-2025-14178)
CVE-2025-14178
CWE-190
High
PHP Out-of-bounds Read Vulnerability (CVE-2025-14177)
CVE-2025-14177
CWE-125
High
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-21260)
CVE-2026-21260
CWE-200
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-21511)
CVE-2026-21511
CWE-502
High
Joomla Improper Access Control Vulnerability (CVE-2026-21629)
CVE-2026-21629
CWE-284
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-21630)
CVE-2026-21630
CWE-138
High
MongoDb Reachable Assertion Vulnerability (CVE-2025-13644)
CVE-2025-13644
CWE-617
High
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-21719)
CVE-2026-21719
CWE-138
High
ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2254)
CVE-2009-2254
CWE-138
High
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-21720)
CVE-2026-21720
CWE-400
High
Grafana Incorrect Authorization Vulnerability (CVE-2026-21721)
CVE-2026-21721
CWE-863
High
Oracle Application Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2006-0586)
CVE-2006-0586
CWE-138
High
MySQL Use of Externally-Controlled Format String Vulnerability (CVE-2009-2446)
CVE-2009-2446
CWE-134
High
Oracle Application Server Other Vulnerability (CVE-2006-0552)
CVE-2006-0552
-
High
Moodle Other Vulnerability (CVE-2006-0147)
CVE-2006-0147
-
High
Oracle JRE CVE-2026-21932 Vulnerability (CVE-2026-21932)
CVE-2026-21932
-
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2978)
CVE-2009-2978
CWE-138
High
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2933)
CVE-2009-2933
CWE-138
High
MongoDb Heap-based Buffer Overflow Vulnerability (CVE-2025-0755)
CVE-2025-0755
CWE-122
High
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-21945)
CVE-2026-21945
CWE-400
High
Oracle Database Server CVE-2026-21939 Vulnerability (CVE-2026-21939)
CVE-2026-21939
-
High
MongoDb Operation on a Resource after Expiration or Release Vulnerability (CVE-2025-10060)
CVE-2025-10060
CWE-672
High
Oracle HTTP Server CVE-2006-0435 Vulnerability (CVE-2006-0435)
CVE-2006-0435
-
High
Oracle Database Server Other Vulnerability (CVE-2006-0551)
CVE-2006-0551
-
High
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762)
CVE-2009-2762
-
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2009-2699)
CVE-2009-2699
CWE-667
High
Oracle Application Server CVE-2006-0435 Vulnerability (CVE-2006-0435)
CVE-2006-0435
-
High
MOVEit Transfer Unverified Password Change Vulnerability (CVE-2025-11235)
CVE-2025-11235
CWE-620
High
Nginx Out-of-bounds Write Vulnerability (CVE-2009-2629)
CVE-2009-2629
CWE-787
High
e107 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-11941)
CVE-2025-11941
CWE-22
High
TYPO3 Improper Authentication Vulnerability (CVE-2009-0256)
CVE-2009-0256
CWE-287
High
Oracle Database Server CVE-2006-1877 Vulnerability (CVE-2006-1877)
CVE-2006-1877
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
CVE-2025-62409
CWE-476
High
phpMyAdmin Improper Input Validation Vulnerability (CVE-2008-4096)
CVE-2008-4096
CWE-20
High
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-67486)
CVE-2025-67486
CWE-138
High
Jenkins Improper Resource Shutdown or Release Vulnerability (CVE-2025-67635)
CVE-2025-67635
CWE-404
High
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)
CVE-2008-3747
CWE-264
High
Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929)
CVE-2008-3929
CWE-59
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3965)
CVE-2008-3965
CWE-138
High
MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3967)
CVE-2008-3967
CWE-264
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67725)
CVE-2025-67725
CWE-400
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67726)
CVE-2025-67726
CWE-400
High
React Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Joomla Other Vulnerability (CVE-2006-3481)
CVE-2006-3481
-
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-67847)
CVE-2025-67847
CWE-94
High
Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability (CVE-2025-67848)
CVE-2025-67848
CWE-280
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4094)
CVE-2008-4094
CWE-138
High
Moodle Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2025-67851)
CVE-2025-67851
CWE-1236
High
XWikiplatform Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-66473)
CVE-2025-66473
CWE-770
High
Moodle Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-67853)
CVE-2025-67853
CWE-307
High
Joomla Numeric Errors Vulnerability (CVE-2008-4102)
CVE-2008-4102
-
High
Joomla Improper Input Validation Vulnerability (CVE-2008-4105)
CVE-2008-4105
CWE-20
High
Joomla Other Vulnerability (CVE-2006-2960)
CVE-2006-2960
-
High
OpenSSL Resource Management Errors Vulnerability (CVE-2006-2940)
CVE-2006-2940
-
High
OpenSSL Resource Management Errors Vulnerability (CVE-2006-2937)
CVE-2006-2937
-
High
Craft CMS Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2025-68454)
CVE-2025-68454
CWE-138
High
Ruby Resource Management Errors Vulnerability (CVE-2008-4310)
CVE-2008-4310
-
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41075)
CVE-2025-41075
CWE-835
High
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4359)
CVE-2008-4359
CWE-200
High
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4360)
CVE-2008-4360
CWE-200
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41074)
CVE-2025-41074
CWE-835
High
Craft CMS Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2025-68455)
CVE-2025-68455
CWE-470
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433)
CVE-2008-4433
CWE-138
High
Apache HTTP Server Numeric Errors Vulnerability (CVE-2006-3747)
CVE-2006-3747
-
High