Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15673 vulnerabilities in this category.

Critical: 1692 High: 4267 Medium: 8899 Low: 813 Information: 2
Vulnerability Name
CVE
CWE
Severity
Apache Traffic Server Always-Incorrect Control Flow Implementation Vulnerability (CVE-2025-58136)
CVE-2025-58136
CWE-670
High
GeoServer Improper Input Validation Vulnerability (CVE-2025-58175)
CVE-2025-58175
CWE-20
High
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-58754)
CVE-2025-58754
CWE-770
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59017)
CVE-2025-59017
CWE-862
High
TYPO3 Missing Authorization Vulnerability (CVE-2025-59022)
CVE-2025-59022
CWE-862
High
SharePoint Use After Free Vulnerability (CVE-2025-59221)
CVE-2025-59221
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-59222)
CVE-2025-59222
CWE-416
High
SharePoint CVE-2025-59228 Vulnerability (CVE-2025-59228)
CVE-2025-59228
-
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59232)
CVE-2025-59232
CWE-125
High
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59235)
CVE-2025-59235
CWE-125
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-59237)
CVE-2025-59237
CWE-502
High
CubeCart Insufficient Session Expiration Vulnerability (CVE-2025-59335)
CVE-2025-59335
CWE-613
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2025-59471)
CVE-2025-59471
CWE-400
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2025-59472)
CVE-2025-59472
CWE-400
High
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-59541)
CVE-2025-59541
CWE-352
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-59775)
CVE-2025-59775
CWE-918
High
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2025-5115)
CVE-2025-5115
CWE-400
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-61752)
CVE-2025-61752
CWE-306
High
Squid Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-62168)
CVE-2025-62168
CWE-209
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-62204)
CVE-2025-62204
CWE-502
High
Liferay DXP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-62254)
CVE-2025-62254
CWE-22
High
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-62254)
CVE-2025-62254
CWE-22
High
Liferay DXP Uncontrolled Resource Consumption Vulnerability (CVE-2025-62260)
CVE-2025-62260
CWE-400
High
Liferay Portal Uncontrolled Resource Consumption Vulnerability (CVE-2025-62260)
CVE-2025-62260
CWE-400
High
Moodle Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62399)
CVE-2025-62399
CWE-307
High
Piwigo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2025-62406)
CVE-2025-62406
CWE-640
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
CVE-2025-62409
CWE-476
High
Envoy Proxy Use After Free Vulnerability (CVE-2025-62504)
CVE-2025-62504
CWE-416
High
phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-62519)
CVE-2025-62519
CWE-138
High
SharePoint Use After Free Vulnerability (CVE-2025-62555)
CVE-2025-62555
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-62558)
CVE-2025-62558
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-62559)
CVE-2025-62559
CWE-416
High
SharePoint Use After Free Vulnerability (CVE-2025-62562)
CVE-2025-62562
CWE-416
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-64458)
CVE-2025-64458
CWE-407
High
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2025-64460)
CVE-2025-64460
CWE-407
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2025-65114)
CVE-2025-65114
-
High
Angular Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-66035)
CVE-2025-66035
CWE-201
High
Envoy Proxy Improper Null Termination Vulnerability (CVE-2025-66220)
CVE-2025-66220
CWE-170
High
XWikiplatform Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-66473)
CVE-2025-66473
CWE-770
High
Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2025-67486)
CVE-2025-67486
CWE-138
High
Jenkins Improper Resource Shutdown or Release Vulnerability (CVE-2025-67635)
CVE-2025-67635
CWE-404
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67725)
CVE-2025-67725
CWE-400
High
Tornado Uncontrolled Resource Consumption Vulnerability (CVE-2025-67726)
CVE-2025-67726
CWE-400
High
React Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
CVE-2025-67779
CWE-502
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-67847)
CVE-2025-67847
CWE-94
High
Moodle Improper Handling of Insufficient Permissions or Privileges Vulnerability (CVE-2025-67848)
CVE-2025-67848
CWE-280
High
Moodle Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2025-67851)
CVE-2025-67851
CWE-1236
High
Moodle Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-67853)
CVE-2025-67853
CWE-307
High
Craft CMS Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2025-68454)
CVE-2025-68454
CWE-138
High
Craft CMS Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2025-68455)
CVE-2025-68455
CWE-470
High
Roundcube Improper Encoding or Escaping of Output Vulnerability (CVE-2025-68460)
CVE-2025-68460
CWE-116
High
phpMyFAQ Exposure of Sensitive Information Through Data Queries Vulnerability (CVE-2025-69200)
CVE-2025-69200
CWE-202
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-69419)
CVE-2025-69419
CWE-787
High
OpenSSL Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-69420)
CVE-2025-69420
CWE-754
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2025-69421)
CVE-2025-69421
CWE-476
High
MongoDb Use After Free Vulnerability (CVE-2025-6706)
CVE-2025-6706
CWE-416
High
MongoDb CVE-2025-6709 Vulnerability (CVE-2025-6709)
CVE-2025-6709
-
High
MongoDb Uncontrolled Recursion Vulnerability (CVE-2025-6710)
CVE-2025-6710
CWE-674
High
MongoDb Excessive Iteration Vulnerability (CVE-2025-6714)
CVE-2025-6714
CWE-834
High
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-70810)
CVE-2025-70810
CWE-352
High
Sqlite Improper Clearing of Heap Memory Before Release ('Heap Inspection') Vulnerability (CVE-2025-70873)
CVE-2025-70873
CWE-244
High
OpenSSL Out-of-bounds Read Vulnerability (CVE-2025-9230)
CVE-2025-9230
CWE-125
High
Jboss EAP Improper Resource Shutdown or Release Vulnerability (CVE-2025-9784)
CVE-2025-9784
CWE-404
High
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2026-0859)
CVE-2026-0859
CWE-502
High
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-101895)
CVE-2026-101895
CWE-400
High
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-101896)
CVE-2026-101896
CWE-400
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-101898)
CVE-2026-101898
CWE-918
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-101901)
CVE-2026-101901
CWE-400
High
axios Inefficient Regular Expression Complexity Vulnerability (CVE-2026-101903)
CVE-2026-101903
CWE-1333
High
axios Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-101905)
CVE-2026-101905
CWE-441
High
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-101906)
CVE-2026-101906
CWE-400
High
axios Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-101907)
CVE-2026-101907
CWE-441
High
axios Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2026-101909)
CVE-2026-101909
CWE-1321
High
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Vulnerability (CVE-2026-102626)
CVE-2026-102626
CWE-707
High