Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
WebLogic CVE-2026-46848 Vulnerability (CVE-2026-46848)
CVE-2026-46848
-
High
Oracle Application Server CVE-2009-0993 Vulnerability (CVE-2009-0993)
CVE-2009-0993
-
High
Joomla Other Vulnerability (CVE-2006-2960)
CVE-2006-2960
-
High
e107 Other Vulnerability (CVE-2005-1966)
CVE-2005-1966
-
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-34355)
CVE-2026-34355
CWE-122
High
XWikiplatform Incorrect Authorization Vulnerability (CVE-2025-53836)
CVE-2025-53836
CWE-863
High
e107 Other Vulnerability (CVE-2005-1949)
CVE-2005-1949
-
High
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-1921)
CVE-2005-1921
CWE-94
High
Drupal Other Vulnerability (CVE-2005-1871)
CVE-2005-1871
-
High
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-54417)
CVE-2025-54417
CWE-94
High
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47057)
CVE-2026-47057
CWE-400
High
WordPress Other Vulnerability (CVE-2005-1687)
CVE-2005-1687
-
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1868)
CVE-2010-1868
CWE-94
High
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34305)
CVE-2026-34305
CWE-200
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-47046)
CVE-2026-47046
CWE-400
High
Envoy Proxy Use After Free Vulnerability (CVE-2025-54588)
CVE-2025-54588
CWE-416
High
Oracle Application Server Other Vulnerability (CVE-2005-1495)
CVE-2005-1495
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-54897)
CVE-2025-54897
CWE-502
High
Serendipity Other Vulnerability (CVE-2005-1451)
CVE-2005-1451
-
High
Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)
CVE-2010-1916
CWE-264
High
Liferay DXP Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43768)
CVE-2025-43768
CWE-201
High
CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1931)
CVE-2010-1931
CWE-138
High
Liferay Portal Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43768)
CVE-2025-43768
CWE-201
High
Serendipity Other Vulnerability (CVE-2005-1450)
CVE-2005-1450
-
High
XWikiplatform CVE-2025-55749 Vulnerability (CVE-2025-55749)
CVE-2025-55749
-
High
LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-56421)
CVE-2025-56421
CWE-138
High
SharePoint Use After Free Vulnerability (CVE-2025-59221)
CVE-2025-59221
CWE-416
High
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6753)
CVE-2008-6753
CWE-138
High
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-58754)
CVE-2025-58754
CWE-770
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3642)
CVE-2025-3642
CWE-94
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3641)
CVE-2025-3641
CWE-94
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6852)
CVE-2008-6852
CWE-138
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-3638)
CVE-2025-3638
CWE-352
High
MediaWiki Other Vulnerability (CVE-2005-0535)
CVE-2005-0535
-
High
Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33941)
CVE-2026-33941
CWE-707
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33940)
CVE-2026-33940
CWE-94
High
Envoy Proxy Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2026-47774)
CVE-2026-47774
CWE-405
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59017)
CVE-2025-59017
CWE-862
High
Oracle Database Server Other Vulnerability (CVE-2005-0297)
CVE-2005-0297
-
High
Envoy Proxy Excessively Deep Nesting Vulnerability (CVE-2026-48042)
CVE-2026-48042
CWE-1124
High
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3055)
CVE-2010-3055
CWE-264
High
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3625)
CVE-2025-3625
CWE-639
High
Apache Traffic Server Always-Incorrect Control Flow Implementation Vulnerability (CVE-2025-58136)
CVE-2025-58136
CWE-670
High
Sqlite Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6593)
CVE-2008-6593
CWE-138
High
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-3586)
CVE-2025-3586
CWE-863
High
Sqlite Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-6592)
CVE-2008-6592
CWE-22
High
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-48044)
CVE-2026-48044
CWE-409
High
Handlebars Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-33939)
CVE-2026-33939
CWE-754
High
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-3586)
CVE-2025-3586
CWE-863
High
PostgreSQL Other Vulnerability (CVE-2005-0245)
CVE-2005-0245
-
High
OpenVPN AS Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2025-3110)
CVE-2025-3110
-
High
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33938)
CVE-2026-33938
CWE-94
High
Envoy Proxy Use of Incorrect Operator Vulnerability (CVE-2026-48497)
CVE-2026-48497
CWE-480
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59022)
CVE-2025-59022
CWE-862
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2005-0211)
CVE-2005-0211
CWE-119
High
MongoDb Uncaught Exception Vulnerability (CVE-2025-3083)
CVE-2025-3083
CWE-248
High
GeoServer Improper Input Validation Vulnerability (CVE-2025-58175)
CVE-2025-58175
CWE-20
High
Apache HTTP Server Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-58098)
CVE-2025-58098
CWE-201
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-56588)
CVE-2025-56588
CWE-94
High
MediaWiki CVE-2026-34088 Vulnerability (CVE-2026-34088)
CVE-2026-34088
-
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-34180)
CVE-2026-34180
CWE-125
High
Chamilo Missing Authentication for Critical Function Vulnerability (CVE-2026-34160)
CVE-2026-34160
CWE-306
High
Oracle Database Server CVE-2010-2390 Vulnerability (CVE-2010-2390)
CVE-2010-2390
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47220)
CVE-2026-47220
CWE-476
High
PHP Other Vulnerability (CVE-2005-1042)
CVE-2005-1042
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
CVE-2026-47221
CWE-476
High
SharePoint Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-47294)
CVE-2026-47294
CWE-138
High
SharePoint Improper Authorization Vulnerability (CVE-2026-47298)
CVE-2026-47298
CWE-285
High
MediaWiki CVE-2026-34092 Vulnerability (CVE-2026-34092)
CVE-2026-34092
-
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41075)
CVE-2025-41075
CWE-835
High
LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41074)
CVE-2025-41074
CWE-835
High
MediaWiki CVE-2026-34091 Vulnerability (CVE-2026-34091)
CVE-2026-34091
-
High
Prototype CVE-2008-7220 Vulnerability (CVE-2008-7220)
CVE-2008-7220
-
High
XOOPS Other Vulnerability (CVE-2005-0743)
CVE-2005-0743
-
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-2679)
CVE-2010-2679
CWE-138
High