Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47423)
CVE-2026-47423
CWE-707
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34087)
CVE-2026-34087
CWE-200
High
Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-34059)
CVE-2026-34059
CWE-126
High
Craft CMS Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2025-57811)
CVE-2025-57811
CWE-138
High
WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7119)
CVE-2008-7119
CWE-138
High
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-57822)
CVE-2025-57822
CWE-918
High
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-57833)
CVE-2025-57833
CWE-138
High
Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2489)
CVE-2010-2489
CWE-119
High
Apache HTTP Server Numeric Errors Vulnerability (CVE-2006-3747)
CVE-2006-3747
-
High
WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-7116)
CVE-2008-7116
CWE-138
High
phpMyAdmin Other Vulnerability (CVE-2005-0567)
CVE-2005-0567
-
High
Macromedia Dreamweaver remote database scripts
CVE-2004-1893
CWE-200
High
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7002)
CVE-2008-7002
CWE-264
High
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-65324)
CVE-2026-65324
CWE-400
High
Joomla Other Vulnerability (CVE-2024-40749)
CVE-2024-40749
-
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2024-38477)
CVE-2024-38477
CWE-476
High
SAP IGS XXE (CVE-2018-2392, CVE-2018-2393)
CVE-2018-2393
CWE-611
High
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
CVE-2024-21260
-
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2740)
CVE-2012-2740
CWE-138
High
PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-18408)
CVE-2026-18408
CWE-829
High
Total.js Directory Traversal (CVE-2019-8903)
CVE-2019-8903
CWE-22
High
Joomla CVE-2012-2747 Vulnerability (CVE-2012-2747)
CVE-2012-2747
-
High
Telerik Web UI RadAsyncUpload Deserialization
CVE-2019-18935
CWE-78
High
Telerik Web UI Insecure Direct Object Reference
CVE-2017-11357
CWE-78
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2762)
CVE-2012-2762
CWE-138
High
Telerik Web UI Unrestricted File Upload (CVE-2017-11317)
CVE-2017-11317
CWE-78
High
Telerik Web UI Unrestricted File Upload (CVE-2014-2217)
CVE-2014-2217
CWE-78
High
WebLogic CVE-2024-21234 Vulnerability (CVE-2024-21234)
CVE-2024-21234
-
High
SAP NetWeaver RECON CVE-2020-6287
CVE-2020-6287
CWE-287
High
Ruby on Rails DoubleTap RCE (CVE-2019-5420)
CVE-2019-5420
CWE-502
High
Oracle WebLogic Remote Code Execution via IIOP
CVE-2020-2551
CWE-502
High
Resin Application Server Improper Input Validation Vulnerability (CVE-2012-2965)
CVE-2012-2965
CWE-20
High
Odoo LFI (CVE-2019-14322)
CVE-2019-14322
CWE-22
High
Resin Application Server Other Vulnerability (CVE-2012-2966)
CVE-2012-2966
-
High
Resin Application Server Other Vulnerability (CVE-2012-2967)
CVE-2012-2967
-
High
Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070)
CVE-2023-49070
CWE-502
High
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-19385)
CVE-2026-19385
CWE-122
High
Oracle E-Business Suite SSRF (CVE-2017-10246)
CVE-2017-10246
CWE-918
High
Oracle E-Business Suite SQL injection (CVE-2017-3549)
CVE-2017-3549
CWE-89
High
Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950
CVE-2020-2950
CWE-502
High
Kentico CMS RCE CVE-2017-17736
CVE-2017-17736
CWE-425
High
Frontaccounting Other Vulnerability (CVE-2007-4279)
CVE-2007-4279
-
High
Kentico CMS Deserialization RCE
CVE-2019-10068
CWE-502
High
DNN (DotNetNuke) CMS Cookie Deserialization RCE CVE-2017-9822
CVE-2017-9822
CWE-502
High
Apache Unomi MVEL RCE (CVE-2020-13942)
CVE-2020-13942
CWE-20
High
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
CVE-2024-21272
-
High
Oracle JRE CVE-2012-3159 Vulnerability (CVE-2012-3159)
CVE-2012-3159
-
High
Nette framework PHP code injection via callback
CVE-2020-15227
CWE-94
High
WordPress Theme OneTone: Unauthenticated Stored Cross-Site Scripting (XSS)
CVE-2019-17231
CWE-79
High
vBulletin 5.6.1 nodeId SQL injection
CVE-2020-12720
CWE-94
High
PHP Numeric Errors Vulnerability (CVE-2012-2386)
CVE-2012-2386
-
High
XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)
CVE-2024-21648
CWE-274
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16239)
CVE-2026-16239
CWE-843
High
vBulletin Pre-Auth RCE Vulnerability
CVE-2020-17496
CWE-94
High
Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622)
CVE-2024-21622
-
High
Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519)
CVE-2024-21519
-
High
Directory Traversal with spring-cloud-config-server
CVE-2020-5410
CWE-22
High
RCE in SQL Server Reporting Services (SSRS)
CVE-2020-0618
CWE-78
High
Remote code execution of user-provided local names in Rails
CVE-2020-8163
CWE-94
High
Openfire Admin Console Full Read SSRF
CVE-2019-18394
CWE-918
High
axios Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-25639)
CVE-2026-25639
CWE-754
High
MobileIron Remote Code Execution via LogService
CVE-2020-15505
CWE-78
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2695)
CVE-2012-2695
CWE-138
High
Unauthenticated Remote Code Execution via JSONWS in Liferay 7.2.0 CE GA1
CVE-2020-7961
CWE-78
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)
CVE-2024-21518
CWE-22
High
Grafana avatar SSRF
CVE-2020-13379
CWE-78
High
SharePoint Out-of-bounds Write Vulnerability (CVE-2012-2539)
CVE-2012-2539
CWE-787
High
F5 BIG-IP Traffic Management User Interface (TMUI) RCE
CVE-2020-5902
CWE-78
High
Citrix XenMobile Server Path Traversal
CVE-2020-8209
CWE-22
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-21514)
CVE-2024-21514
CWE-138
High
Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
Citrix ADC/Gateway Unauthenticated Remote Code Execution
CVE-2019-19781
CWE-22
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)
CVE-2024-21426
-
High
SharePoint CVE-2024-21318 Vulnerability (CVE-2024-21318)
CVE-2024-21318
-
High