Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Liferay JSON service API authentication vulnerability
-
CWE-287
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34007)
CVE-2024-34007
CWE-352
High
MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914)
CVE-2026-6914
CWE-191
High
Wordpress Plugin Backup Migration Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-7002)
CVE-2023-7002
CWE-138
High
Internet Information Services Other Vulnerability (CVE-2000-0886)
CVE-2000-0886
-
High
Internet Information Services Configuration Vulnerability (CVE-1999-0725)
CVE-1999-0725
-
High
Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38473)
CVE-2024-38473
CWE-116
High
Internet Information Services Other Vulnerability (CVE-2000-0884)
CVE-2000-0884
-
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34008)
CVE-2024-34008
CWE-352
High
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4937)
CVE-2011-4937
CWE-200
High
IBMHttpServer Other Vulnerability (CVE-2000-1168)
CVE-2000-1168
-
High
Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-38286)
CVE-2024-38286
CWE-770
High
Internet Information Services Other Vulnerability (CVE-2000-0970)
CVE-2000-0970
-
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60529)
CVE-2026-60529
CWE-284
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60680)
CVE-2026-60680
CWE-284
High
Oracle JRE Improper Access Control Vulnerability (CVE-2026-62574)
CVE-2026-62574
CWE-284
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-42516)
CVE-2024-42516
CWE-20
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
CVE-2023-5966
CWE-434
High
Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2024-41991)
CVE-2024-41991
CWE-1284
High
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2024-39573)
CVE-2024-39573
CWE-20
High
Django CVE-2024-41990 Vulnerability (CVE-2024-41990)
CVE-2024-41990
-
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60530)
CVE-2026-60530
CWE-269
High
MediaWiki Uncontrolled Resource Consumption Vulnerability (CVE-2024-34506)
CVE-2024-34506
CWE-400
High
Internet Information Services Other Vulnerability (CVE-2001-0902)
CVE-2001-0902
-
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60699)
CVE-2026-60699
CWE-284
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60528)
CVE-2026-60528
CWE-284
High
MediaWiki Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2024-34507)
CVE-2024-34507
CWE-707
High
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-65658)
CVE-2026-65658
CWE-502
High
Joomla! component Kunena Forum multiple vulnerabilities
CVE-2014-9103
CWE-89
High
WebLogic Improper Authentication Vulnerability (CVE-2026-60679)
CVE-2026-60679
CWE-287
High
MySQL Other Vulnerability (CVE-2000-0981)
CVE-2000-0981
-
High
MySQL CVE-2018-2562 Vulnerability (CVE-2018-2562)
CVE-2018-2562
-
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5849)
CVE-2012-5849
CWE-138
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5965)
CVE-2023-5965
CWE-434
High
GeoServer Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2024-34711)
CVE-2024-34711
CWE-200
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)
CVE-2023-5869
CWE-190
High
Drupal core 7.x SQL injection vulnerability
CVE-2014-3704
CWE-89
High
Oracle Database Server Other Vulnerability (CVE-2001-0833)
CVE-2001-0833
-
High
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-42902)
CVE-2024-42902
CWE-94
High
CKEditor 4.0.1 cross-site scripting vulnerability
-
CWE-79
High
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2024-39614)
CVE-2024-39614
CWE-130
High
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)
CVE-2024-39338
CWE-918
High
Ektron CMS400.NET ContentRatingGraph.aspx SQL injection
CVE-2008-5122
CWE-89
High
Security vulnerability in MySQL/MariaDB sql/password.c
CVE-2012-2122
CWE-287
High
Oracle JRE CVE-2012-5068 Vulnerability (CVE-2012-5068)
CVE-2012-5068
-
High
Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)
CVE-2023-6266
CWE-552
High
Moodle Incomplete Cleanup Vulnerability (CVE-2024-38275)
CVE-2024-38275
CWE-459
High
PostgreSQL Uncontrolled Recursion Vulnerability (CVE-2026-6479)
CVE-2026-6479
CWE-674
High
phpMyAdmin Other Vulnerability (CVE-2001-1060)
CVE-2001-1060
-
High
Apache HTTP Server Other Vulnerability (CVE-1999-1053)
CVE-1999-1053
-
High
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5493)
CVE-2012-5493
CWE-94
High
Next.js Uncontrolled Resource Consumption Vulnerability (CVE-2024-39693)
CVE-2024-39693
CWE-400
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-43394)
CVE-2024-43394
CWE-918
High
Oracle Database Server Other Vulnerability (CVE-2001-0943)
CVE-2001-0943
-
High
Oracle Application Server Other Vulnerability (CVE-2001-0591)
CVE-2001-0591
-
High
Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-43204)
CVE-2024-43204
CWE-918
High
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53952)
CVE-2023-53952
CWE-434
High
WebLogic Improper Access Control Vulnerability (CVE-2026-60527)
CVE-2026-60527
CWE-284
High
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2024-34750)
CVE-2024-34750
CWE-400
High
HTTP.sys remote code execution vulnerability
CVE-2015-1635
CWE-119
High
Jenkins Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2024-43044)
CVE-2024-43044
CWE-754
High
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-38276)
CVE-2024-38276
CWE-352
High
CakePHP 1.3.5 / 1.2.8 unserialize() vulnerability
CVE-2010-4335
CWE-20
High
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34469)
CVE-2024-34469
CWE-707
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-53979)
CVE-2023-53979
CWE-22
High
Drupal 7 arbitrary PHP code execution and information disclosure
CVE-2012-4554
CWE-434
High
Mailman Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15011)
CVE-2020-15011
CWE-138
Medium
MySQL CVE-2021-2056 Vulnerability (CVE-2021-2056)
CVE-2021-2056
-
Medium
MySQL CVE-2020-14861 Vulnerability (CVE-2020-14861)
CVE-2020-14861
-
Medium
Django Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-23336)
CVE-2021-23336
CWE-444
Medium
MySQL CVE-2021-2065 Vulnerability (CVE-2021-2065)
CVE-2021-2065
-
Medium
MySQL CVE-2020-14866 Vulnerability (CVE-2020-14866)
CVE-2020-14866
-
Medium
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33740)
CVE-2026-33740
CWE-639
Medium
DataTables Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-23445)
CVE-2021-23445
CWE-707
Medium
Chamilo Improper Restriction of XML External Entity Reference Vulnerability (CVE-2026-33737)
CVE-2026-33737
CWE-611
Medium