Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15395 vulnerabilities in this category.

Critical: 1674 High: 4166 Medium: 8761 Low: 792 Information: 2
Vulnerability Name
CVE
CWE
Severity
MyBB Other Vulnerability (CVE-2007-1963)
CVE-2007-1963
-
High
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21686)
CVE-2024-21686
CWE-707
High
Agentejo Cockpit CMS resetpassword NoSQLi (CVE-2020-35847)
CVE-2020-35847
CWE-89
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-25673)
CVE-2026-25673
CWE-770
High
Atlassian Confluence CVE-2024-21683 Vulnerability (CVE-2024-21683)
CVE-2024-21683
-
High
phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4653)
CVE-2007-4653
CWE-138
High
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21678)
CVE-2024-21678
CWE-707
High
Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21677)
CVE-2024-21677
CWE-22
High
PostgreSQL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-16238)
CVE-2026-16238
CWE-843
High
PHP Resource Management Errors Vulnerability (CVE-2007-4660)
CVE-2007-4660
-
High
Sitecore XP Deserialization RCE (CVE-2021-42237)
CVE-2021-42237
CWE-502
High
PHP Other Vulnerability (CVE-2007-1885)
CVE-2007-1885
-
High
Apache Airflow Experimental API Auth Bypass CVE-2020-13927
CVE-2020-13927
CWE-200
High
OpenSSL Numeric Errors Vulnerability (CVE-2012-2131)
CVE-2012-2131
-
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-26045)
CVE-2026-26045
CWE-94
High
Apache HTTP Server mod_proxy SSRF (CVE-2021-40438)
CVE-2021-40438
CWE-918
High
PHP Other Vulnerability (CVE-2007-1887)
CVE-2007-1887
-
High
Apache HTTP Server Insecure Path Normalization (CVE-2021-41773, CVE-2021-42013)
CVE-2021-41773
CWE-22
High
Piwigo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2012-2208)
CVE-2012-2208
CWE-22
High
Drupal Other Vulnerability (CVE-2024-22362)
CVE-2024-22362
-
High
Apache Flink jobmanager/logs Path Traversal
CVE-2020-17519
CWE-22
High
PHP Other Vulnerability (CVE-2007-1888)
CVE-2007-1888
-
High
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)
CVE-2024-22201
CWE-770
High
PHP Other Vulnerability (CVE-2007-1889)
CVE-2007-1889
-
High
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2311)
CVE-2012-2311
CWE-138
High
PHP Other Vulnerability (CVE-2007-1890)
CVE-2007-1890
-
High
PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4663)
CVE-2007-4663
CWE-22
High
Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850)
CVE-2021-27850
CWE-200
High
JBoss Application Server Improper Privilege Management Vulnerability (CVE-2012-2312)
CVE-2012-2312
CWE-269
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2324)
CVE-2012-2324
CWE-138
High
MOVEit Transfer Relative Path Traversal Vulnerability (CVE-2026-8650)
CVE-2026-8650
CWE-23
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2325)
CVE-2012-2325
CWE-138
High
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-22188)
CVE-2024-22188
CWE-94
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4662)
CVE-2007-4662
CWE-119
High
MOVEit Transfer Authentication Bypass by Spoofing Vulnerability (CVE-2026-8651)
CVE-2026-8651
CWE-290
High
Vulnerable package dependencies [high]
-
CWE-1104
High
Zimbra Collaboration Suite SSRF (CVE-2020-7796)
CVE-2020-7796
CWE-918
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4661)
CVE-2007-4661
CWE-119
High
Deserialization of Untrusted Data (XStream)
CVE-2020-26217
CWE-502
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2332)
CVE-2012-2332
CWE-138
High
VMware vRealize Operations Server Side Request Forgery (SSRF) vulnerability
CVE-2021-21975
CWE-918
High
Adobe Experience Manager Misconfiguration
CVE-2016-0957
CWE-1188
High
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1848)
CVE-2026-1848
CWE-770
High
Fortinet Authentication bypass on administrative interface
CVE-2022-40684
CWE-288
High
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5469)
CVE-2012-5469
CWE-264
High
Umbraco CMS remote code execution
-
CWE-94
High
Umbraco CMS TemplateService remote code execution
CVE-2013-4793
CWE-94
High
timthumb.php remote code execution
CVE-2011-4106
CWE-20
High
Struts2/XWork remote command execution (S2-014)
CVE-2013-2115
CWE-94
High
Multiple critical vulnerabilities in Apache Struts2
CVE-2012-0393
CWE-917
High
Apache Struts 2 ClassLoader manipulation and denial of service
CVE-2014-0114
CWE-701
High
Apache Struts 2 ClassLoader manipulation and denial of service (S2-020)
CVE-2014-0050
CWE-701
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5540)
CVE-2023-5540
CWE-94
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5539)
CVE-2023-5539
CWE-94
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-5379)
CVE-2023-5379
CWE-770
High
OpenSSL CVE-2023-5363 Vulnerability (CVE-2023-5363)
CVE-2023-5363
-
High
Microsoft SharePoint XSS spoofing vulnerability
CVE-2015-2522
CWE-80
High
Ruby on Rails directory traversal vulnerability
CVE-2014-0130
CWE-22
High
WebLogic Server Side Request Forgery
CVE-2014-4242
CWE-918
High
Rails remote code execution using render :inline
CVE-2016-2098
CWE-94
High
Ruby on Rails SQL injection
CVE-2012-2695
CWE-89
High
Rails mass assignment
-
CWE-915
High
Parallels Plesk SQL injection vulnerability
CVE-2012-1557
CWE-89
High
PHP-CGI remote code execution
CVE-2012-2311
CWE-20
High
Oracle Reports rwservlet vulnerabilities
CVE-2012-3153
CWE-20
High
Oracle JavaServer Faces multiple vulnerabilities
CVE-2013-3827
CWE-22
High
OpenX xajaxargs SQL injection vulnerability
-
CWE-89
High
Nagios core config manager SQL injection vulnerability
CVE-2013-6875
CWE-89
High
Spring Cloud Gateway External Control of System or Configuration Setting Vulnerability (CVE-2026-22750)
CVE-2026-22750
CWE-15
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-22666)
CVE-2026-22666
CWE-94
High
Oracle JRE CVE-2026-21932 Vulnerability (CVE-2026-21932)
CVE-2026-21932
-
High
MovableType remote code execution
CVE-2015-1592
CWE-94
High
VirtueMart access control bypass
-
CWE-287
High
Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5195)
CVE-2012-5195
CWE-119
High
MongoDB injection
-
CWE-943
High