Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2024-21272 Vulnerability (CVE-2024-21272)
CVE-2024-21272
-
High
OpenCms Chemistry XML External Entity (XXE) vulnerability (CVE-2023-42344)
CVE-2023-42344
CWE-611
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2762)
CVE-2012-2762
CWE-138
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1225)
CVE-2012-1225
CWE-138
High
Metabase RCE (CVE-2023-38646)
CVE-2023-38646
CWE-20
High
Appwrite favicon SSRF (CVE-2023-27159)
CVE-2023-27159
CWE-918
High
VMware Workspace ONE Access SSTI (CVE-2022-22954)
CVE-2022-22954
CWE-94
High
VMware vCenter Log4Shell RCE
CVE-2021-44228
CWE-78
High
lighttpd v1.4.34 SQL injection and path traversal
CVE-2014-2324
CWE-89
High
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-35161)
CVE-2024-35161
-
High
Microsoft SQL Server Other Vulnerability (CVE-1999-1556)
CVE-1999-1556
-
High
Artifactory Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-65616)
CVE-2026-65616
CWE-347
High
VirtueMart access control bypass
-
CWE-287
High
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-50722)
CVE-2023-50722
CWE-707
High
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53929)
CVE-2023-53929
CWE-1236
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)
CVE-2012-5629
CWE-264
High
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-50721)
CVE-2023-50721
CWE-94
High
phpMyAdmin Other Vulnerability (CVE-2001-0478)
CVE-2001-0478
-
High
Oracle Application Server Other Vulnerability (CVE-2001-0419)
CVE-2001-0419
-
High
Internet Information Services Other Vulnerability (CVE-2001-0506)
CVE-2001-0506
-
High
Internet Information Services Other Vulnerability (CVE-2001-0507)
CVE-2001-0507
-
High
DotNetNuke multiple vulnerabilities
CVE-2012-1030
CWE-79
High
Ruby Improper Input Validation Vulnerability (CVE-2011-4815)
CVE-2011-4815
CWE-20
High
PostgreSQL Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2026-6464)
CVE-2026-6464
CWE-829
High
Squid Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-5824)
CVE-2023-5824
CWE-755
High
Umbraco CMS remote code execution
-
CWE-94
High
Jboss EAP CVE-2012-5626 Vulnerability (CVE-2012-5626)
CVE-2012-5626
-
High
SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4833)
CVE-2011-4833
CWE-138
High
SharePoint CVE-2024-38227 Vulnerability (CVE-2024-38227)
CVE-2024-38227
-
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-38094)
CVE-2024-38094
CWE-502
High
Microsoft SQL Server Other Vulnerability (CVE-2000-0199)
CVE-2000-0199
-
High
EktronCMS Saxon XSLT parser remote code execution
CVE-2015-0931
CWE-78
High
Misfortune Cookie vulnerability
CVE-2014-9222
CWE-119
High
Struts2/XWork remote command execution (S2-014)
CVE-2013-2115
CWE-94
High
Oracle Application Server Other Vulnerability (CVE-2000-0169)
CVE-2000-0169
-
High
MySQL Other Vulnerability (CVE-2000-0148)
CVE-2000-0148
-
High
Umbraco CMS TemplateService remote code execution
CVE-2013-4793
CWE-94
High
Opencart Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-36694)
CVE-2024-36694
CWE-94
High
Apache Traffic Server CVE-2024-35296 Vulnerability (CVE-2024-35296)
CVE-2024-35296
-
High
timthumb.php remote code execution
CVE-2011-4106
CWE-20
High
Joomla! core remote file inclusion
CVE-2014-7228.xml
CWE-98
High
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5487)
CVE-2012-5487
CWE-264
High
Joomla! remote code execution vulnerability
CVE-2015-8562
CWE-94
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0344)
CVE-2001-0344
-
High
phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4825)
CVE-2011-4825
CWE-94
High
Security update: Hotfix available for ColdFusion
CVE-2013-0632
CWE-287
High
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37821)
CVE-2024-37821
CWE-94
High
Microsoft SQL Server Other Vulnerability (CVE-2001-0542)
CVE-2001-0542
-
High
Internet Information Services Other Vulnerability (CVE-2000-0746)
CVE-2000-0746
-
High
MantisBT multiple security issues
CVE-2015-1042
CWE-200
High
WordPress OptimizePress unrestricted file upload
CVE-2013-7102
CWE-20
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40898)
CVE-2024-40898
CWE-918
High
Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-65921)
CVE-2026-65921
CWE-22
High
Internet Information Services Other Vulnerability (CVE-1999-1233)
CVE-1999-1233
-
High
Craft CMS Improper Authentication Vulnerability (CVE-2024-41800)
CVE-2024-41800
CWE-287
High
WooFramework shortcode exploit
-
CWE-95
High
Squid Uncontrolled Recursion Vulnerability (CVE-2023-50269)
CVE-2023-50269
CWE-674
High
Zabbix 2.0.8 SQL injection
CVE-2013-5743
CWE-89
High
PostgreSQL UNIX Symbolic Link (Symlink) Following Vulnerability (CVE-2026-6475)
CVE-2026-6475
CWE-61
High
Pega Infinity Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-50168)
CVE-2023-50168
CWE-611
High
Zend Framework local file disclosure via XXE injection
CVE-2015-5161
CWE-611
High
WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)
CVE-2011-4899
-
High
Oracle JRE CVE-2012-5084 Vulnerability (CVE-2012-5084)
CVE-2012-5084
-
High
ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-53930)
CVE-2023-53930
CWE-639
High
Zope Web Application Server Other Vulnerability (CVE-2000-0725)
CVE-2000-0725
-
High
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40748)
CVE-2024-40748
CWE-707
High
Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5195)
CVE-2012-5195
CWE-119
High
Adobe ColdFusion 9 administrative login bypass
CVE-2013-0632
CWE-287
High
WebLogic Server Side Request Forgery
CVE-2014-4242
CWE-918
High
SharePoint CVE-2024-38228 Vulnerability (CVE-2024-38228)
CVE-2024-38228
-
High
XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719)
CVE-2023-50719
CWE-312
High
Artifactory Deserialization of Untrusted Data Vulnerability (CVE-2026-65617)
CVE-2026-65617
CWE-502
High
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6471)
CVE-2026-6471
CWE-862
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2026-6473)
CVE-2026-6473
CWE-190
High