Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Drupal Other Vulnerability (CVE-2006-2831)
CVE-2006-2831
-
High
SharePoint CVE-2022-44690 Vulnerability (CVE-2022-44690)
CVE-2022-44690
-
High
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3625)
CVE-2025-3625
CWE-639
High
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-3586)
CVE-2025-3586
CWE-863
High
MySQL Other Vulnerability (CVE-2006-2753)
CVE-2006-2753
-
High
phpMyFAQ Exposure of Sensitive Information Through Data Queries Vulnerability (CVE-2025-69200)
CVE-2025-69200
CWE-202
High
Drupal Other Vulnerability (CVE-2006-2742)
CVE-2006-2742
-
High
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-3586)
CVE-2025-3586
CWE-863
High
WordPress Other Vulnerability (CVE-2006-2667)
CVE-2006-2667
-
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-69419)
CVE-2025-69419
CWE-787
High
MongoDb Uncaught Exception Vulnerability (CVE-2025-3083)
CVE-2025-3083
CWE-248
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2025-69421)
CVE-2025-69421
CWE-476
High
EspoCRM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-32390)
CVE-2025-32390
CWE-138
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-32873)
CVE-2025-32873
CWE-770
High
MongoDb CVE-2025-6709 Vulnerability (CVE-2025-6709)
CVE-2025-6709
-
High
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6124)
CVE-2008-6124
CWE-138
High
PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5946)
CVE-2008-5946
CWE-138
High
PHP Configuration Vulnerability (CVE-2008-5844)
CVE-2008-5844
-
High
MongoDb Use After Free Vulnerability (CVE-2025-6706)
CVE-2025-6706
CWE-416
High
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
CVE-2008-5695
CWE-20
High
XWikiplatform Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-32968)
CVE-2025-32968
CWE-138
High
Roundcube Resource Management Errors Vulnerability (CVE-2008-5620)
CVE-2008-5620
-
High
Serendipity Other Vulnerability (CVE-2006-2495)
CVE-2006-2495
-
High
Joomla Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-5671)
CVE-2008-5671
CWE-94
High
XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-5665)
CVE-2008-5665
CWE-138
High
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-5658)
CVE-2008-5658
CWE-22
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5625)
CVE-2008-5625
CWE-264
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5624)
CVE-2008-5624
CWE-264
High
Liferay Portal CVE-2024-25148 Vulnerability (CVE-2024-25148)
CVE-2024-25148
-
High
Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2004-0150)
CVE-2004-0150
CWE-120
High
Zope Web Application Server Other Vulnerability (CVE-2001-1278)
CVE-2001-1278
-
High
Moodle Improper Input Validation Vulnerability (CVE-2012-0801)
CVE-2012-0801
CWE-20
High
F5 iControl REST unauthenticated remote command execution vulnerability
CVE-2021-22986
CWE-78
High
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2012-0785)
CVE-2012-0785
CWE-400
High
BuddyPress REST API Privilege Escalation
CVE-2021-21389
CWE-269
High
Apache Shiro authentication bypass
CVE-2020-17523
CWE-287
High
Squid Use After Free Vulnerability (CVE-2023-49288)
CVE-2023-49288
CWE-416
High
Squid Reachable Assertion Vulnerability (CVE-2023-49286)
CVE-2023-49286
CWE-617
High
Squid Out-of-bounds Read Vulnerability (CVE-2023-49285)
CVE-2023-49285
CWE-125
High
Apache HTTP Server mod_proxy SSRF (CVE-2021-40438)
CVE-2021-40438
CWE-918
High
Apache HTTP Server Insecure Path Normalization (CVE-2021-41773, CVE-2021-42013)
CVE-2021-41773
CWE-22
High
Apache Flink jobmanager/logs Path Traversal
CVE-2020-17519
CWE-22
High
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-48293)
CVE-2023-48293
CWE-352
High
Apache Airflow Experimental API Auth Bypass CVE-2020-13927
CVE-2020-13927
CWE-200
High
XWiki CVE-2023-48241 Vulnerability (CVE-2023-48241)
CVE-2023-48241
-
High
XWiki Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-48240)
CVE-2023-48240
CWE-918
High
MongoDb Use After Free Vulnerability (CVE-2026-8201)
CVE-2026-8201
CWE-416
High
ForgeRock OpenAM Deserialization RCE (CVE-2021-29156)
CVE-2021-29156
CWE-502
High
Vulnerable package dependencies [high]
-
CWE-1104
High
Zimbra Collaboration Suite SSRF (CVE-2020-7796)
CVE-2020-7796
CWE-918
High
Deserialization of Untrusted Data (XStream)
CVE-2020-26217
CWE-502
High
VMware vRealize Operations Server Side Request Forgery (SSRF) vulnerability
CVE-2021-21975
CWE-918
High
Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850)
CVE-2021-27850
CWE-200
High
CubeCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-47675)
CVE-2023-47675
CWE-138
High
Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47444)
CVE-2023-47444
CWE-94
High
Sitecore XP Deserialization RCE (CVE-2021-42237)
CVE-2021-42237
CWE-502
High
PHP Resource Management Errors Vulnerability (CVE-2012-0830)
CVE-2012-0830
-
High
SearchBlox Local File Inclusion (CVE-2020-35580)
CVE-2020-35580
CWE-22
High
Apache OFBiz SOAPService Deserialization RCE
CVE-2021-26295
CWE-502
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47039)
CVE-2023-47039
CWE-787
High
Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)
CVE-2023-47038
CWE-787
High
ManageEngine ADSelfService Plus Authentication Bypass (CVE-2021-40539)
CVE-2021-40539
CWE-287
High
ForgeRock AM / OpenAM Deserialization RCE (CVE-2021-35464)
CVE-2021-35464
CWE-502
High
GitLab ExifTool RCE (CVE-2021-22205)
CVE-2021-22205
CWE-918
High
GoCD information disclosure (CVE-2021-43287)
CVE-2021-43287
CWE-200
High
Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168)
CVE-2023-50168
CWE-611
High
SSRF via logo_uri in MITREid Connect
CVE-2021-26715
CWE-918
High
Coppermine Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53868)
CVE-2023-53868
CWE-434
High
Microsoft Exchange Server Pre-auth Path Confusion vulnerability (CVE-2021-34473)
CVE-2021-34473
CWE-918
High
Microsoft Exchange Server Server-Side Request Forgery (SSRF) vulnerability
CVE-2021-26855
CWE-918
High
Lucee Server Arbitrary File Creation
CVE-2021-21307
CWE-22
High
GeoServer Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-51444)
CVE-2023-51444
CWE-434
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50723)
CVE-2023-50723
CWE-94
High
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-50722)
CVE-2023-50722
CWE-707
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)
CVE-2023-50721
CWE-94
High