Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
TYPO3 CVE-2024-25121 Vulnerability (CVE-2024-25121)
CVE-2024-25121
-
High
Adobe Experience Manager writable JCR nodes via querybuilder
CVE-2025-54246
CWE-276
High
Oracle Application Server Other Vulnerability (CVE-2001-1216)
CVE-2001-1216
-
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130)
CVE-2011-3130
CWE-138
High
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46834)
CVE-2026-46834
CWE-400
High
OpenSSL Cryptographic Issues Vulnerability (CVE-2000-1254)
CVE-2000-1254
-
High
Mailman Other Vulnerability (CVE-2001-1132)
CVE-2001-1132
-
High
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-1938)
CVE-2011-1938
CWE-119
High
Internet Information Services Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2687)
CVE-2011-2687
CWE-264
High
Next.js Middleware Authorization Bypass
CVE-2025-29927
CWE-285
High
SharePoint Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-45456)
CVE-2026-45456
CWE-843
High
Envoy Proxy Use After Free Vulnerability (CVE-2024-23322)
CVE-2024-23322
CWE-416
High
SharePoint Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2026-47294)
CVE-2026-47294
CWE-138
High
Joomla Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48901)
CVE-2026-48901
CWE-524
High
SharePoint Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-45454)
CVE-2026-45454
CWE-22
High
Zimbra Collaboration LFI (CVE-2025-68645)
CVE-2025-68645
CWE-22
High
Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-42536)
CVE-2026-42536
CWE-122
High
Adobe Experience Manager Blind XXE via package upload
CVE-2025-54246
CWE-611
High
Internet Information Services Other Vulnerability (CVE-2000-0970)
CVE-2000-0970
-
High
MySQL Other Vulnerability (CVE-2000-0981)
CVE-2000-0981
-
High
MySQL Other Vulnerability (CVE-2001-1275)
CVE-2001-1275
-
High
Ruby Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-46727)
CVE-2026-46727
CWE-362
High
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-44578)
CVE-2026-44578
CWE-918
High
MySQL Other Vulnerability (CVE-2001-1274)
CVE-2001-1274
-
High
WebLogic CVE-2024-21234 Vulnerability (CVE-2024-21234)
CVE-2024-21234
-
High
Internet Information Services Other Vulnerability (CVE-2000-0886)
CVE-2000-0886
-
High
Oracle JRE CVE-2024-20952 Vulnerability (CVE-2024-20952)
CVE-2024-20952
-
High
Adobe Experience Manager exposed user passwords via querybuilder
CVE-2025-54246
CWE-200
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45659)
CVE-2026-45659
CWE-502
High
Internet Information Services Other Vulnerability (CVE-2000-0884)
CVE-2000-0884
-
High
PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2001-1246)
CVE-2001-1246
CWE-707
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45484)
CVE-2026-45484
CWE-502
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21673)
CVE-2024-21673
CWE-94
High
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42764)
CVE-2026-42764
CWE-476
High
Zope Web Application Server Other Vulnerability (CVE-2001-1227)
CVE-2001-1227
-
High
Microsoft SQL Server Other Vulnerability (CVE-1999-1556)
CVE-1999-1556
-
High
Atlassian Confluence Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-21672)
CVE-2024-21672
CWE-94
High
Next.js Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-44574)
CVE-2026-44574
CWE-288
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47204)
CVE-2026-47204
CWE-476
High
Internet Information Services Other Vulnerability (CVE-2000-0457)
CVE-2000-0457
-
High
Internet Information Services Other Vulnerability (CVE-1999-1233)
CVE-1999-1233
-
High
WebLogic CVE-2024-21260 Vulnerability (CVE-2024-21260)
CVE-2024-21260
-
High
PHP Other Vulnerability (CVE-1999-0058)
CVE-1999-0058
-
High
WebLogic CVE-2024-21274 Vulnerability (CVE-2024-21274)
CVE-2024-21274
-
High
SharePoint Untrusted Pointer Dereference Vulnerability (CVE-2026-45471)
CVE-2026-45471
CWE-822
High
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3190)
CVE-2011-3190
CWE-264
High
Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325)
CVE-2024-23325
CWE-755
High
Oracle Database Server Other Vulnerability (CVE-2001-0943)
CVE-2001-0943
-
High
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
CVE-2024-21272
-
High
Plone CMS Incorrect Default Permissions Vulnerability (CVE-2024-22889)
CVE-2024-22889
CWE-276
High
Nginx Heap-based Buffer Overflow Vulnerability (CVE-2026-42945)
CVE-2026-42945
CWE-122
High
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)
CVE-2024-23326
-
High
Apache Tomcat Improper Handling of Case Sensitivity Vulnerability (CVE-2026-43513)
CVE-2026-43513
CWE-178
High
Oracle Application Server Other Vulnerability (CVE-2000-1236)
CVE-2000-1236
-
High
XWiki Improper Handling of Insufficient Privileges Vulnerability (CVE-2024-21648)
CVE-2024-21648
CWE-274
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)
CVE-2024-23327
CWE-476
High
Envoy Proxy Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
CVE-2026-49975
CWE-789
High
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-2506)
CVE-2011-2506
CWE-94
High
SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-45475)
CVE-2026-45475
CWE-122
High
Apache HTTP Server Other Vulnerability (CVE-1999-0045)
CVE-1999-0045
-
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0344)
CVE-2001-0344
-
High
SharePoint Use After Free Vulnerability (CVE-2026-45458)
CVE-2026-45458
CWE-416
High
WebLogic CVE-2026-46848 Vulnerability (CVE-2026-46848)
CVE-2026-46848
-
High
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-21147)
CVE-2024-21147
CWE-200
High
phpMyAdmin Other Vulnerability (CVE-2001-1060)
CVE-2001-1060
-
High
Zope Web Application Server Other Vulnerability (CVE-2000-1211)
CVE-2000-1211
-
High
Envoy Proxy CVE-2024-23324 Vulnerability (CVE-2024-23324)
CVE-2024-23324
-
High
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-3379)
CVE-2011-3379
CWE-94
High
Mailman Other Vulnerability (CVE-2000-0861)
CVE-2000-0861
-
High
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
CVE-2026-47221
CWE-476
High
MongoDb Use After Free Vulnerability (CVE-2026-4148)
CVE-2026-4148
CWE-416
High
Internet Information Services Other Vulnerability (CVE-2001-0333)
CVE-2001-0333
-
High
Apache HTTP Server Other Vulnerability (CVE-1999-0071)
CVE-1999-0071
-
High
PHP Other Vulnerability (CVE-1999-0068)
CVE-1999-0068
-
High