Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Nagios XI Magpie_debug.php Unauthenticated RCE
CVE-2018-15708
CWE-94
High
Grafana Snapshot Authentication Bypass (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
Ghost CMS Theme Path Traversal (CVE-2023-32235)
CVE-2023-32235
CWE-22
High
FastAdmin Path Traversal (CVE-2024-7928)
CVE-2024-7928
CWE-22
High
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
CVE-2018-15440
CWE-80
High
Drupal REST Remote Code Execution
CVE-2019-6340
CWE-78
High
Dolibarr Information Disclosure (CVE-2023-33568)
CVE-2023-33568
CWE-552
High
Horde Imp Unauthenticated Remote Command Execution
CVE-2018-19518
CWE-94
High
Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2024-26142)
CVE-2024-26142
CWE-1333
High
Magento (2.2.0 to 2.3.0) Unauthenticated SQL Injection Vulnerability
CVE-2019-7139
CWE-89
High
CRMEB SQL Injection (CVE-2024-36837)
CVE-2024-36837
CWE-89
High
PHP Improper Resource Shutdown or Release Vulnerability (CVE-2026-7263)
CVE-2026-7263
CWE-404
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2026-7383)
CVE-2026-7383
CWE-787
High
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25978)
CVE-2024-25978
CWE-770
High
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0882)
CVE-2012-0882
CWE-119
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-25982)
CVE-2024-25982
CWE-352
High
PHP Out-of-bounds Read Vulnerability (CVE-2026-7568)
CVE-2026-7568
CWE-125
High
Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850)
CVE-2021-27850
CWE-200
High
Oracle E-Business Suite Unauthenticated Remote Code Execution
CVE-2022-21587
CWE-94
High
Osclass Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-0973)
CVE-2012-0973
CWE-138
High
Nagios XI Unauthenticated SQLi CVE-2018-8734
CVE-2018-8734
CWE-89
High
File Content Disclosure in Action View
CVE-2019-5418
CWE-200
High
Webmin v1.920 Unauhenticated Remote Command Execution
CVE-2019-15107
CWE-94
High
Cisco Adaptive Security Appliance (ASA) Path Traversal CVE-2020-3452
CVE-2020-3452
CWE-20
High
Coppermine Cross Site Scripting Vulnerability (CVE-2026-82482)
CVE-2026-82482
-
High
Progress MOVEit Transfer SQL Injection
CVE-2023-34362
CWE-89
High
Liferay Portal Improper Restriction of XML External Entity Reference Vulnerability (CVE-2024-25606)
CVE-2024-25606
CWE-611
High
SAP NetWeaver RECON CVE-2020-6287
CVE-2020-6287
CWE-287
High
TYPO3 CVE-2024-25121 Vulnerability (CVE-2024-25121)
CVE-2024-25121
-
High
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-21514)
CVE-2024-21514
CWE-138
High
Joomla Use of Insufficiently Random Values Vulnerability (CVE-2012-1562)
CVE-2012-1562
CWE-330
High
Joomla Improper Privilege Management Vulnerability (CVE-2012-1563)
CVE-2012-1563
CWE-269
High
VMware Horizon Log4Shell RCE
CVE-2021-44228
CWE-78
High
Liferay DXP CVE-2024-25148 Vulnerability (CVE-2024-25148)
CVE-2024-25148
-
High
SharePoint CVE-2024-21426 Vulnerability (CVE-2024-21426)
CVE-2024-21426
-
High
Joomla CVE-2012-2747 Vulnerability (CVE-2012-2747)
CVE-2012-2747
-
High
Liferay Portal CVE-2024-25148 Vulnerability (CVE-2024-25148)
CVE-2024-25148
-
High
Ubiquiti Unifi Log4Shell RCE
CVE-2021-44228
CWE-78
High
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
phpList Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2740)
CVE-2012-2740
CWE-138
High
Angular Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)
CVE-2024-21490
CWE-1333
High
Apache Unomi MVEL RCE (CVE-2020-13942)
CVE-2020-13942
CWE-20
High
WebLogic CVE-2024-21274 Vulnerability (CVE-2024-21274)
CVE-2024-21274
-
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2695)
CVE-2012-2695
CWE-138
High
Oracle WebLogic Remote Code Execution via IIOP
CVE-2020-2551
CWE-502
High
MongoDb Use After Free Vulnerability (CVE-2026-8201)
CVE-2026-8201
CWE-416
High
SolarWinds Orion API Auth bypass (CVE-2020-10148)
CVE-2020-10148
CWE-287
High
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1598)
CVE-2012-1598
CWE-264
High
Citrix ADC/Gateway Unauthenticated Remote Code Execution
CVE-2019-19781
CWE-22
High
Citrix XenMobile Server Path Traversal
CVE-2020-8209
CWE-22
High
Pentaho API Auth bypass (CVE-2021-31602)
CVE-2021-31602
CWE-863
High
F5 BIG-IP Traffic Management User Interface (TMUI) RCE
CVE-2020-5902
CWE-78
High
Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445)
CVE-2022-21445
CWE-502
High
Opencart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-21518)
CVE-2024-21518
CWE-22
High
SharePoint CVE-2024-21318 Vulnerability (CVE-2024-21318)
CVE-2024-21318
-
High
PleskLin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1557)
CVE-2012-1557
CWE-138
High
Resin Application Server Other Vulnerability (CVE-2012-2967)
CVE-2012-2967
-
High
Qlik Sense Enterprise Auth Bypass (CVE-2023-41266)
CVE-2023-41266
CWE-20
High
Resin Application Server Other Vulnerability (CVE-2012-2966)
CVE-2012-2966
-
High
Resin Application Server Improper Input Validation Vulnerability (CVE-2012-2965)
CVE-2012-2965
CWE-20
High
Telerik Web UI Unrestricted File Upload (CVE-2014-2217)
CVE-2014-2217
CWE-78
High
Telerik Web UI Unrestricted File Upload (CVE-2017-11317)
CVE-2017-11317
CWE-78
High
Code Evaluation (Apache Struts) S2-046
CVE-2017-5638
CWE-94
High
ZK Framework AuUploader Information Disclosure (CVE-2022-36537)
CVE-2022-36537
CWE-200
High
Strapi Cognito provider Authentication Bypass (CVE-2023-22893)
CVE-2023-22893
CWE-287
High
Telerik Web UI Insecure Direct Object Reference
CVE-2017-11357
CWE-78
High
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
CVE-2024-21260
-
High
Moodle Improper Input Validation Vulnerability (CVE-2012-1168)
CVE-2012-1168
CWE-20
High
SAP NW DI SSRF vulnerability (CVE-2021-33690)
CVE-2021-33690
CWE-918
High
Telerik Web UI RadAsyncUpload Deserialization
CVE-2019-18935
CWE-78
High
PleskWin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1557)
CVE-2012-1557
CWE-138
High
Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)
CVE-2021-35587
CWE-502
High
Total.js Directory Traversal (CVE-2019-8903)
CVE-2019-8903
CWE-22
High
Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2012-1170)
CVE-2012-1170
CWE-354
High
Openfire Path Traversal (CVE-2023-32315)
CVE-2023-32315
CWE-22
High