Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2
Vulnerability Name
CVE
CWE
Severity
PrestaShop CVE-2024-34717 Vulnerability (CVE-2024-34717)
CVE-2024-34717
-
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-31720)
CVE-2025-31720
CWE-862
Medium
Bootstrap Select Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20921)
CVE-2019-20921
CWE-707
Medium
Python Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2019-9740)
CVE-2019-9740
CWE-707
Medium
GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34831)
CVE-2024-34831
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9714)
CVE-2019-9714
CWE-707
Medium
IBM WebSEAL Weak Password Requirements Vulnerability (CVE-2024-35137)
CVE-2024-35137
CWE-521
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9711)
CVE-2019-9711
CWE-707
Medium
MongoDb Use After Free Vulnerability (CVE-2019-2393)
CVE-2019-2393
CWE-416
Medium
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2024-35139)
CVE-2024-35139
CWE-276
Medium
MongoDb Other Vulnerability (CVE-2019-20923)
CVE-2019-20923
-
Medium
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-20924)
CVE-2019-20924
CWE-754
Medium
GeoServer CVE-2024-35230 Vulnerability (CVE-2024-35230)
CVE-2024-35230
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-31675)
CVE-2025-31675
CWE-707
Medium
DOMPurify URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-25155)
CVE-2019-25155
CWE-601
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2019-2389)
CVE-2019-2389
CWE-20
Medium
Drupal Incorrect Authorization Vulnerability (CVE-2025-31673)
CVE-2025-31673
CWE-863
Medium
MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2019-2392)
CVE-2019-2392
CWE-190
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8131)
CVE-2019-8131
CWE-707
Medium
Piwigo Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2023-44393)
CVE-2023-44393
CWE-707
Medium
Oracle JRE CVE-2024-20926 Vulnerability (CVE-2024-20926)
CVE-2024-20926
-
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35358)
CVE-2021-35358
CWE-707
Medium
MySQL CVE-2021-35577 Vulnerability (CVE-2021-35577)
CVE-2021-35577
-
Medium
MySQL CVE-2021-35575 Vulnerability (CVE-2021-35575)
CVE-2021-35575
-
Medium
Oracle JRE CVE-2021-35567 Vulnerability (CVE-2021-35567)
CVE-2021-35567
-
Medium
WebLogic CVE-2021-35552 Vulnerability (CVE-2021-35552)
CVE-2021-35552
-
Medium
MySQL CVE-2021-35546 Vulnerability (CVE-2021-35546)
CVE-2021-35546
-
Medium
MySQL CVE-2021-35537 Vulnerability (CVE-2021-35537)
CVE-2021-35537
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35463)
CVE-2021-35463
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35415)
CVE-2021-35415
CWE-707
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-45149)
CVE-2022-45149
CWE-352
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45150)
CVE-2022-45150
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35361)
CVE-2021-35361
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35360)
CVE-2021-35360
CWE-707
Medium
Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35210)
CVE-2021-35210
CWE-707
Medium
MySQL CVE-2021-35596 Vulnerability (CVE-2021-35596)
CVE-2021-35596
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-45151)
CVE-2022-45151
CWE-707
Medium
Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-34553)
CVE-2021-34553
CWE-22
Medium
Liferay DXP CVE-2022-45320 Vulnerability (CVE-2022-45320)
CVE-2022-45320
-
Medium
SharePoint CVE-2021-34517 Vulnerability (CVE-2021-34517)
CVE-2021-34517
-
Medium
Liferay Portal CVE-2022-45320 Vulnerability (CVE-2022-45320)
CVE-2022-45320
-
Medium
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-34429)
CVE-2021-34429
CWE-200
Medium
Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-45783)
CVE-2022-45783
CWE-22
Medium
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-46158)
CVE-2022-46158
CWE-200
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33829)
CVE-2021-33829
CWE-707
Medium
Squid Improper Input Validation Vulnerability (CVE-2021-33620)
CVE-2021-33620
CWE-20
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33618)
CVE-2021-33618
CWE-707
Medium
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2022-47927)
CVE-2022-47927
CWE-732
Medium
MySQL CVE-2021-35591 Vulnerability (CVE-2021-35591)
CVE-2021-35591
-
Medium
MySQL CVE-2021-35597 Vulnerability (CVE-2021-35597)
CVE-2021-35597
-
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33512)
CVE-2021-33512
CWE-707
Medium
MySQL CVE-2021-35629 Vulnerability (CVE-2021-35629)
CVE-2021-35629
-
Medium
MySQL CVE-2021-35642 Vulnerability (CVE-2021-35642)
CVE-2021-35642
-
Medium
MySQL CVE-2021-35641 Vulnerability (CVE-2021-35641)
CVE-2021-35641
-
Medium
MySQL CVE-2021-35638 Vulnerability (CVE-2021-35638)
CVE-2021-35638
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44946)
CVE-2022-44946
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44947)
CVE-2022-44947
CWE-707
Medium
MySQL CVE-2021-35637 Vulnerability (CVE-2021-35637)
CVE-2021-35637
-
Medium
MySQL CVE-2021-35636 Vulnerability (CVE-2021-35636)
CVE-2021-35636
-
Medium
MySQL CVE-2021-35635 Vulnerability (CVE-2021-35635)
CVE-2021-35635
-
Medium
MySQL CVE-2021-35634 Vulnerability (CVE-2021-35634)
CVE-2021-35634
-
Medium
MySQL CVE-2021-35632 Vulnerability (CVE-2021-35632)
CVE-2021-35632
-
Medium
MySQL CVE-2021-35631 Vulnerability (CVE-2021-35631)
CVE-2021-35631
-
Medium
MySQL CVE-2021-35630 Vulnerability (CVE-2021-35630)
CVE-2021-35630
-
Medium
MySQL CVE-2021-35628 Vulnerability (CVE-2021-35628)
CVE-2021-35628
-
Medium
MySQL CVE-2021-35602 Vulnerability (CVE-2021-35602)
CVE-2021-35602
-
Medium
MySQL CVE-2021-35627 Vulnerability (CVE-2021-35627)
CVE-2021-35627
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44948)
CVE-2022-44948
CWE-707
Medium
MySQL CVE-2021-35626 Vulnerability (CVE-2021-35626)
CVE-2021-35626
-
Medium
MySQL CVE-2021-35624 Vulnerability (CVE-2021-35624)
CVE-2021-35624
-
Medium
MySQL CVE-2021-35622 Vulnerability (CVE-2021-35622)
CVE-2021-35622
-
Medium
MySQL CVE-2021-35621 Vulnerability (CVE-2021-35621)
CVE-2021-35621
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44949)
CVE-2022-44949
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44950)
CVE-2022-44950
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44951)
CVE-2022-44951
CWE-707
Medium