Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Directory Traversal with spring-cloud-config-server
CVE-2020-5410
CWE-22
High
RCE in SQL Server Reporting Services (SSRS)
CVE-2020-0618
CWE-78
High
Squid NULL Pointer Dereference Vulnerability (CVE-2023-46728)
CVE-2023-46728
CWE-476
High
Remote code execution of user-provided local names in Rails
CVE-2020-8163
CWE-94
High
JBoss Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1094)
CVE-2012-1094
CWE-200
High
Openfire Admin Console Full Read SSRF
CVE-2019-18394
CWE-918
High
Nette framework PHP code injection via callback
CVE-2020-15227
CWE-94
High
MobileIron Remote Code Execution via LogService
CVE-2020-15505
CWE-78
High
Unauthenticated Remote Code Execution via JSONWS in Liferay 7.2.0 CE GA1
CVE-2020-7961
CWE-78
High
Grafana avatar SSRF
CVE-2020-13379
CWE-78
High
F5 BIG-IP Traffic Management User Interface (TMUI) RCE
CVE-2020-5902
CWE-78
High
Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)
CVE-2023-46724
CWE-295
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
CVE-2023-46695
CWE-770
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1116)
CVE-2012-1116
CWE-138
High
Alibaba Nacos Authentication Bypass (CVE-2021-29441)
CVE-2021-29441
CWE-287
High
ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53905)
CVE-2023-53905
CWE-1236
High
Joomla Use of Insufficiently Random Values Vulnerability (CVE-2012-1562)
CVE-2012-1562
CWE-330
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4833)
CVE-2011-4833
CWE-138
High
Skype for Business SSRF (CVE-2023-41763)
CVE-2023-41763
CWE-918
High
Sitecore Arbitrary File Read (CVE-2024-46938)
CVE-2024-46938
CWE-200
High
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10234)
CVE-2024-10234
CWE-707
High
PostgreSQL CVE-2024-0985 Vulnerability (CVE-2024-0985)
CVE-2024-0985
-
High
Securepoint UTM (CVE-2023-22620, CVE-2023-22897)
CVE-2023-22897
CWE-863
High
Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)
CVE-2024-0669
CWE-1021
High
Polyfill.io Supply Chain Attack
-
CWE-829
High
Microsoft SQL Server CVE-2024-0056 Vulnerability (CVE-2024-0056)
CVE-2024-0056
-
High
Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)
CVE-2023-7002
CWE-138
High
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
CVE-2024-6387
CWE-362
High
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)
CVE-2026-6553
CWE-312
High
Ruby Improper Input Validation Vulnerability (CVE-2011-4815)
CVE-2011-4815
CWE-20
High
Apache OFBiz SSRF (CVE-2023-50968)
CVE-2023-50968
CWE-918
High
phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4825)
CVE-2011-4825
CWE-94
High
Nexus Repository Manager 3 Path Traversal (CVE-2024-4956)
CVE-2024-4956
CWE-22
High
TeamCity Authentication Bypass (CVE-2024-27199)
CVE-2024-27199
CWE-288
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6637)
CVE-2026-6637
CWE-138
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6638)
CVE-2026-6638
CWE-138
High
WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)
CVE-2011-4899
-
High
SSRF in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-21893)
CVE-2024-21893
CWE-918
High
Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805)
CVE-2023-46805
CWE-287
High
Ivanti EPM SQLi RCE (CVE-2024-29824)
CVE-2024-29824
CWE-89
High
Grafana Snapshot Authentication Bypass (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
Ghost CMS Theme Path Traversal (CVE-2023-32235)
CVE-2023-32235
CWE-22
High
FastAdmin Path Traversal (CVE-2024-7928)
CVE-2024-7928
CWE-22
High
Dolibarr Information Disclosure (CVE-2023-33568)
CVE-2023-33568
CWE-552
High
CRMEB SQL Injection (CVE-2024-36837)
CVE-2024-36837
CWE-89
High
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
Oracle E-Business Suite Unauthenticated Remote Code Execution
CVE-2022-21587
CWE-94
High
Progress MOVEit Transfer SQL Injection
CVE-2023-34362
CWE-89
High
SolarWinds Serv-U Directory Traversal (CVE-2024-28995)
CVE-2024-28995
CWE-22
High
MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)
CVE-2024-10921
CWE-158
High
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
CVE-2023-6271
-
High
GeoServer WMS SSRF (CVE-2023-43795)
CVE-2023-43795
CWE-918
High
Vite Arbitrary File Read (CVE-2025-30208, CVE-2025-31125)
CVE-2025-31125
CWE-200
High
SimpleHelp Path Traversal (CVE-2024-57727)
CVE-2024-57728
CWE-22
High
Oracle JRE CVE-2024-20932 Vulnerability (CVE-2024-20932)
CVE-2024-20932
-
High
WebLogic CVE-2024-20931 Vulnerability (CVE-2024-20931)
CVE-2024-20931
-
High
Grafana Open Redirect (CVE-2025-4123)
CVE-2025-4123
CWE-601
High
WebLogic CVE-2024-20927 Vulnerability (CVE-2024-20927)
CVE-2024-20927
-
High
PmWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4453)
CVE-2011-4453
CWE-94
High
Oracle JRE CVE-2024-20918 Vulnerability (CVE-2024-20918)
CVE-2024-20918
-
High
SAP BO BIP XXE (CVE-2022-28213)
CVE-2022-28213
CWE-112
High
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2024-1635)
CVE-2024-1635
CWE-400
High
Grafana CVE-2024-1442 Vulnerability (CVE-2024-1442)
CVE-2024-1442
-
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-6473)
CVE-2026-6473
CWE-190
High
Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2024-13009)
CVE-2024-13009
CWE-404
High
Harbor Unauthorized Access Vulnerability
CVE-2022-46463
CWE-200
High
GeoServer SSRF (CVE-2021-40822)
CVE-2021-40822
CWE-918
High
PostgreSQL Uncontrolled Recursion Vulnerability (CVE-2026-6479)
CVE-2026-6479
CWE-674
High
PostgreSQL UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-6475)
CVE-2026-6475
CWE-61
High
Drupal Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-11941)
CVE-2024-11941
CWE-835
High
PHP Use After Free Vulnerability (CVE-2024-11235)
CVE-2024-11235
CWE-416
High
ColdFusion Access Control bypass (CVE-2023-29298/CVE-2023-38205)
CVE-2023-38205
CWE-284
High
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-11234)
CVE-2024-11234
CWE-138
High
PHP Out-of-bounds Write Vulnerability (CVE-2024-11233)
CVE-2024-11233
CWE-787
High
ColdFusion PMS Arbitrary File Read (CVE-2024-20767)
CVE-2024-20767
CWE-284
High