🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
Documentation
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
14673 vulnerabilities
in this category.
Critical: 1573
High: 3882
Medium: 8446
Low: 770
Information: 2
Vulnerability Name
CVE
CWE
Severity
MyBB Other Vulnerability (CVE-2007-1963)
CVE-2007-1963
-
High
PHP Other Vulnerability (CVE-2005-1042)
CVE-2005-1042
-
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433)
CVE-2008-4433
CWE-138
High
IBMHttpServer Other Vulnerability (CVE-2004-1082)
CVE-2004-1082
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4033)
CVE-2007-4033
CWE-119
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)
CVE-2012-5629
CWE-264
High
MySQL Other Vulnerability (CVE-2002-1809)
CVE-2002-1809
-
High
Oracle Database Server Other Vulnerability (CVE-2002-1767)
CVE-2002-1767
-
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3997)
CVE-2007-3997
CWE-264
High
Apache HTTP Server Other Vulnerability (CVE-2004-1082)
CVE-2004-1082
-
High
Mailman Other Vulnerability (CVE-2004-1143)
CVE-2004-1143
-
High
Apache HTTP Server Improper Locking Vulnerability (CVE-2002-1850)
CVE-2002-1850
CWE-667
High
Lighttpd Other Vulnerability (CVE-2007-3949)
CVE-2007-3949
-
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849)
CVE-2012-5849
CWE-138
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-0448)
CVE-2011-0448
CWE-138
High
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-0449)
CVE-2011-0449
CWE-264
High
TYPO3 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2010-3668)
CVE-2010-3668
CWE-138
High
Oracle Application Server Other Vulnerability (CVE-2004-1362)
CVE-2004-1362
-
High
Oracle Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2004-1364)
CVE-2004-1364
CWE-22
High
Jboss EAP CVE-2012-5626 Vulnerability (CVE-2012-5626)
CVE-2012-5626
-
High
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-3708)
CVE-2010-3708
CWE-20
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5909)
CVE-2012-5909
CWE-138
High
Oracle Database Server CVE-2007-5520 Vulnerability (CVE-2007-5520)
CVE-2007-5520
-
High
Oracle Application Server CVE-2007-5518 Vulnerability (CVE-2007-5518)
CVE-2007-5518
-
High
MySQL Other Vulnerability (CVE-2004-0835)
CVE-2004-0835
-
High
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3864)
CVE-2010-3864
CWE-362
High
Apache HTTP Server Other Vulnerability (CVE-2004-0885)
CVE-2004-0885
-
High
Apache HTTP Server Incorrect Calculation of Buffer Size Vulnerability (CVE-2004-0940)
CVE-2004-0940
CWE-131
High
Oracle Application Server CVE-2007-5519 Vulnerability (CVE-2007-5519)
CVE-2007-5519
-
High
Oracle Application Server CVE-2007-5520 Vulnerability (CVE-2007-5520)
CVE-2007-5520
-
High
Oracle Application Server CVE-2007-5521 Vulnerability (CVE-2007-5521)
CVE-2007-5521
-
High
Oracle Application Server CVE-2007-5525 Vulnerability (CVE-2007-5525)
CVE-2007-5525
-
High
Oracle Application Server CVE-2007-5523 Vulnerability (CVE-2007-5523)
CVE-2007-5523
-
High
Oracle Application Server CVE-2007-5524 Vulnerability (CVE-2007-5524)
CVE-2007-5524
-
High
osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2002-1991)
CVE-2002-1991
CWE-94
High
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3714)
CVE-2010-3714
CWE-264
High
MySQL Other Vulnerability (CVE-2002-1923)
CVE-2002-1923
-
High
MySQL Other Vulnerability (CVE-2002-1921)
CVE-2002-1921
-
High
Liferay Portal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5327)
CVE-2010-5327
CWE-264
High
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-0537)
CVE-2011-0537
CWE-22
High
TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2010-3663)
CVE-2010-3663
CWE-434
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4166)
CVE-2010-4166
CWE-138
High
MySQL Other Vulnerability (CVE-2002-1376)
CVE-2002-1376
-
High
PHP Other Vulnerability (CVE-2002-1396)
CVE-2002-1396
-
High
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3055)
CVE-2010-3055
CWE-264
High
Oracle Application Server Other Vulnerability (CVE-2004-1370)
CVE-2004-1370
-
High
Oracle JRE CVE-2012-3159 Vulnerability (CVE-2012-3159)
CVE-2012-3159
-
High
MySQL CVE-2012-3158 Vulnerability (CVE-2012-3158)
CVE-2012-3158
-
High
Apache Tomcat Other Vulnerability (CVE-2002-1394)
CVE-2002-1394
-
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643)
CVE-2012-6643
CWE-138
High
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)
CVE-2012-6707
CWE-326
High
PostgreSQL Other Vulnerability (CVE-2002-1397)
CVE-2002-1397
-
High
phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5688)
CVE-2007-5688
CWE-138
High
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741)
CVE-2007-5741
CWE-94
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-2679)
CVE-2010-2679
CWE-138
High
Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2489)
CVE-2010-2489
CWE-119
High
MySQL Other Vulnerability (CVE-2002-1375)
CVE-2002-1375
-
High
MySQL Other Vulnerability (CVE-2002-1374)
CVE-2002-1374
-
High
Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5897)
CVE-2007-5897
CWE-119
High
Oracle Application Server CVE-2004-1368 Vulnerability (CVE-2004-1368)
CVE-2004-1368
-
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6496)
CVE-2012-6496
CWE-138
High
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-3662)
CVE-2010-3662
CWE-138
High
Oracle Application Server Other Vulnerability (CVE-2002-1631)
CVE-2002-1631
-
High
PostgreSQL Other Vulnerability (CVE-2002-1642)
CVE-2002-1642
-
High
Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-0698)
CVE-2011-0698
CWE-22
High
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5554)
CVE-2007-5554
CWE-200
High
Oracle Database Server CVE-2010-3600 Vulnerability (CVE-2010-3600)
CVE-2010-3600
-
High
NuSOAP Improper Certificate Validation Vulnerability (CVE-2012-6071)
CVE-2012-6071
CWE-295
High
Oracle Application Server Other Vulnerability (CVE-2007-3863)
CVE-2007-3863
-
High
Plone CMS CVE-2011-0720 Vulnerability (CVE-2011-0720)
CVE-2011-0720
-
High
Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-3419)
CVE-2010-3419
CWE-94
High
PostgreSQL Other Vulnerability (CVE-2002-1400)
CVE-2002-1400
-
High
Oracle Application Server Other Vulnerability (CVE-2007-3862)
CVE-2007-3862
-
High
Oracle Application Server Other Vulnerability (CVE-2007-3861)
CVE-2007-3861
-
High
Oracle Application Server Other Vulnerability (CVE-2002-1630)
CVE-2002-1630
-
High
«
1
...
63
64
65
...
196
»