Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4221)
CVE-2023-4221
CWE-138
High
Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-4222)
CVE-2023-4222
CWE-138
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4223)
CVE-2023-4223
CWE-434
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4224)
CVE-2023-4224
CWE-434
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4225)
CVE-2023-4225
CWE-434
High
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4226)
CVE-2023-4226
CWE-434
High
Grafana CVE-2023-4399 Vulnerability (CVE-2023-4399)
CVE-2023-4399
-
High
Jboss EAP Improper Initialization Vulnerability (CVE-2023-4503)
CVE-2023-4503
CWE-665
High
OpenSSL CVE-2023-4807 Vulnerability (CVE-2023-4807)
CVE-2023-4807
-
High
Grafana CVE-2023-4822 Vulnerability (CVE-2023-4822)
CVE-2023-4822
-
High
Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168)
CVE-2023-50168
CWE-611
High
Squid Uncontrolled Recursion Vulnerability (CVE-2023-50269)
CVE-2023-50269
CWE-674
High
XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719)
CVE-2023-50719
CWE-312
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)
CVE-2023-50721
CWE-94
High
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-50722)
CVE-2023-50722
CWE-707
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50723)
CVE-2023-50723
CWE-94
High
GeoServer Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-51444)
CVE-2023-51444
CWE-434
High
Coppermine Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53868)
CVE-2023-53868
CWE-434
High
ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53905)
CVE-2023-53905
CWE-1236
High
Rukovoditel Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53913)
CVE-2023-53913
CWE-1236
High
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53929)
CVE-2023-53929
CWE-1236
High
ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-53930)
CVE-2023-53930
CWE-639
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53933)
CVE-2023-53933
CWE-434
High
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53952)
CVE-2023-53952
CWE-434
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-53979)
CVE-2023-53979
CWE-22
High
TornadoWebServer Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-54397)
CVE-2023-54397
-
High
OpenSSL CVE-2023-5363 Vulnerability (CVE-2023-5363)
CVE-2023-5363
-
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-5379)
CVE-2023-5379
CWE-770
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5539)
CVE-2023-5539
CWE-94
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5540)
CVE-2023-5540
CWE-94
High
Squid Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-5824)
CVE-2023-5824
CWE-755
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)
CVE-2023-5869
CWE-190
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5965)
CVE-2023-5965
CWE-434
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
CVE-2023-5966
CWE-434
High
Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)
CVE-2023-6266
CWE-552
High
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
CVE-2023-6271
-
High
WP Plugin Contact Form 7 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-6449)
CVE-2023-6449
CWE-434
High
Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)
CVE-2023-7002
CWE-138
High
Microsoft SQL Server CVE-2024-0056 Vulnerability (CVE-2024-0056)
CVE-2024-0056
-
High
Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)
CVE-2024-0669
CWE-1021
High
PostgreSQL CVE-2024-0985 Vulnerability (CVE-2024-0985)
CVE-2024-0985
-
High
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10234)
CVE-2024-10234
CWE-707
High
MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)
CVE-2024-10921
CWE-158
High
PostgreSQL Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2024-10979)
CVE-2024-10979
CWE-610
High
PHP Out-of-bounds Write Vulnerability (CVE-2024-11233)
CVE-2024-11233
CWE-787
High
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-11234)
CVE-2024-11234
CWE-138
High
PHP Use After Free Vulnerability (CVE-2024-11235)
CVE-2024-11235
CWE-416
High
Drupal Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-11941)
CVE-2024-11941
CWE-835
High
Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2024-13009)
CVE-2024-13009
CWE-404
High
TornadoWebServer Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-14029)
CVE-2024-14029
-
High
Grafana CVE-2024-1442 Vulnerability (CVE-2024-1442)
CVE-2024-1442
-
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2024-1635)
CVE-2024-1635
CWE-400
High
Oracle JRE CVE-2024-20918 Vulnerability (CVE-2024-20918)
CVE-2024-20918
-
High
WebLogic CVE-2024-20927 Vulnerability (CVE-2024-20927)
CVE-2024-20927
-
High
WebLogic CVE-2024-20931 Vulnerability (CVE-2024-20931)
CVE-2024-20931
-
High
Oracle JRE CVE-2024-20932 Vulnerability (CVE-2024-20932)
CVE-2024-20932
-
High
Oracle JRE CVE-2024-20952 Vulnerability (CVE-2024-20952)
CVE-2024-20952
-
High
WebLogic CVE-2024-21006 Vulnerability (CVE-2024-21006)
CVE-2024-21006
-
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2024-21007)
CVE-2024-21007
CWE-306
High
MySQL CVE-2024-21090 Vulnerability (CVE-2024-21090)
CVE-2024-21090
-
High
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-21147)
CVE-2024-21147
CWE-200
High
WebLogic CVE-2024-21175 Vulnerability (CVE-2024-21175)
CVE-2024-21175
-
High
WebLogic CVE-2024-21182 Vulnerability (CVE-2024-21182)
CVE-2024-21182
-
High
WebLogic CVE-2024-21183 Vulnerability (CVE-2024-21183)
CVE-2024-21183
-
High
Oracle Database Server CVE-2024-21184 Vulnerability (CVE-2024-21184)
CVE-2024-21184
-
High
WebLogic CVE-2024-21234 Vulnerability (CVE-2024-21234)
CVE-2024-21234
-
High
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
CVE-2024-21260
-
High
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
CVE-2024-21272
-
High
WebLogic CVE-2024-21274 Vulnerability (CVE-2024-21274)
CVE-2024-21274
-
High
SharePoint CVE-2024-21318 Vulnerability (CVE-2024-21318)
CVE-2024-21318
-
High
SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)
CVE-2024-21426
-
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-21514)
CVE-2024-21514
CWE-138
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)
CVE-2024-21518
CWE-22
High
Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519)
CVE-2024-21519
-
High