Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2019-2993 Vulnerability (CVE-2019-2993)
CVE-2019-2993
-
Medium
MySQL CVE-2019-2997 Vulnerability (CVE-2019-2997)
CVE-2019-2997
-
Medium
Joomla CVE-2019-7739 Vulnerability (CVE-2019-7739)
CVE-2019-7739
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7744)
CVE-2019-7744
CWE-707
Medium
Rukovoditel Cross-site Scripting (XSS) Vulnerability (CVE-2019-7541)
CVE-2019-7541
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7400)
CVE-2019-7400
CWE-707
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2025-26532)
CVE-2025-26532
CWE-863
Medium
MySQL CVE-2019-2998 Vulnerability (CVE-2019-2998)
CVE-2019-2998
-
Medium
MySQL Use After Free Vulnerability (CVE-2019-7317)
CVE-2019-7317
CWE-416
Medium
ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7172)
CVE-2019-7172
CWE-707
Medium
Apache Traffic Server CVE-2024-56195 Vulnerability (CVE-2024-56195)
CVE-2024-56195
-
Medium
Oracle JRE CVE-2019-2999 Vulnerability (CVE-2019-2999)
CVE-2019-2999
-
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55920)
CVE-2024-55920
CWE-749
Medium
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-55894)
CVE-2024-55894
CWE-352
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7862)
CVE-2019-7862
CWE-707
Medium
MySQL CVE-2019-2974 Vulnerability (CVE-2019-2974)
CVE-2019-2974
-
Medium
MySQL CVE-2019-2967 Vulnerability (CVE-2019-2967)
CVE-2019-2967
-
Medium
MySQL CVE-2019-2968 Vulnerability (CVE-2019-2968)
CVE-2019-2968
-
Medium
MySQL CVE-2019-2969 Vulnerability (CVE-2019-2969)
CVE-2019-2969
-
Medium
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-27624)
CVE-2025-27624
CWE-352
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27623)
CVE-2025-27623
CWE-312
Medium
TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2024-55891)
CVE-2024-55891
CWE-532
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-55892)
CVE-2024-55892
CWE-601
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27622)
CVE-2025-27622
CWE-312
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7857)
CVE-2019-7857
CWE-352
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55893)
CVE-2024-55893
CWE-749
Medium
Magento Cryptographic Issues Vulnerability (CVE-2019-7855)
CVE-2019-7855
-
Medium
GeoServer Missing Authorization Vulnerability (CVE-2025-27505)
CVE-2025-27505
CWE-862
Medium
Oracle JRE CVE-2019-2975 Vulnerability (CVE-2019-2975)
CVE-2019-2975
-
Medium
Oracle JRE CVE-2019-2977 Vulnerability (CVE-2019-2977)
CVE-2019-2977
-
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7853)
CVE-2019-7853
CWE-707
Medium
MySQL CVE-2019-2982 Vulnerability (CVE-2019-2982)
CVE-2019-2982
-
Medium
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7852)
CVE-2019-7852
CWE-200
Medium
Oracle JRE CVE-2019-2989 Vulnerability (CVE-2019-2989)
CVE-2019-2989
-
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)
CVE-2019-7851
CWE-352
Medium
Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41665)
CVE-2024-41665
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8233)
CVE-2019-8233
CWE-707
Medium
Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2024-26267)
CVE-2024-26267
CWE-1188
Medium
XWikiplatform Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-31464)
CVE-2024-31464
CWE-916
Medium
XWikiplatform URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-32970)
CVE-2025-32970
CWE-601
Medium
Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-30617)
CVE-2024-30617
CWE-352
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11065)
CVE-2020-11065
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11064)
CVE-2020-11064
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-30618)
CVE-2024-30618
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11030)
CVE-2020-11030
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11029)
CVE-2020-11029
CWE-707
Medium
SharePoint Origin Validation Error Vulnerability (CVE-2019-1442)
CVE-2019-1442
CWE-346
Medium
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1443)
CVE-2019-1443
CWE-434
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11110)
CVE-2020-11110
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11026)
CVE-2020-11026
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11025)
CVE-2020-11025
CWE-707
Medium
OpenSSL Missing Encryption of Sensitive Data Vulnerability (CVE-2019-1547)
CVE-2019-1547
CWE-311
Medium
OpenSSL Use of Insufficiently Random Values Vulnerability (CVE-2019-1549)
CVE-2019-1549
CWE-330
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1551)
CVE-2019-1551
CWE-200
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)
CVE-2020-11023
CWE-707
Medium
MySQL Observable Discrepancy Vulnerability (CVE-2019-1559)
CVE-2019-1559
CWE-203
Medium
WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)
CVE-2020-11023
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11074)
CVE-2020-11074
CWE-707
Medium
SharePoint CVE-2019-1260 Vulnerability (CVE-2019-1260)
CVE-2019-1260
-
Medium
jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11022)
CVE-2020-11022
CWE-707
Medium
PleskLin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11584)
CVE-2020-11584
CWE-707
Medium
qdPM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-11814)
CVE-2020-11814
CWE-138
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11813)
CVE-2020-11813
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-29881)
CVE-2024-29881
CWE-707
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2123)
CVE-2024-2123
CWE-707
Medium
WP Plugin Contact Form 7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2242)
CVE-2024-2242
CWE-707
Medium
Artifactory Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2247)
CVE-2024-2247
CWE-707
Medium
PHP Observable Discrepancy Vulnerability (CVE-2024-2408)
CVE-2024-2408
CWE-203
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-2765)
CVE-2024-2765
CWE-707
Medium
PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11584)
CVE-2020-11584
CWE-707
Medium
Nexus Repository Manager Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11415)
CVE-2020-11415
CWE-312
Medium
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1202)
CVE-2019-1202
CWE-200
Medium
PleskLin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11583)
CVE-2020-11583
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1203)
CVE-2019-1203
CWE-707
Medium
PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11583)
CVE-2020-11583
CWE-707
Medium