Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9751)
CVE-2026-9751
CWE-532
Medium
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28169)
CVE-2021-28169
CWE-200
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29673)
CVE-2021-29673
CWE-707
Medium
MongoDb Improper Validation of Specified Type of Input Vulnerability (CVE-2026-9742)
CVE-2026-9742
CWE-1287
Medium
ownCloud Incorrect Authorization Vulnerability (CVE-2021-29659)
CVE-2021-29659
CWE-863
Medium
WebLogic Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression La Vulnerability (CVE-2021-28170)
CVE-2021-28170
CWE-138
Medium
MySQL CVE-2020-14725 Vulnerability (CVE-2020-14725)
CVE-2020-14725
-
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9750)
CVE-2026-9750
CWE-617
Medium
WebLogic CVE-2020-14557 Vulnerability (CVE-2020-14557)
CVE-2020-14557
-
Medium
MySQL CVE-2020-14702 Vulnerability (CVE-2020-14702)
CVE-2020-14702
-
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9746)
CVE-2026-9746
CWE-617
Medium
MySQL CVE-2020-14773 Vulnerability (CVE-2020-14773)
CVE-2020-14773
-
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28420)
CVE-2021-28420
CWE-707
Medium
Highcharts JS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29489)
CVE-2021-29489
CWE-707
Medium
SharePoint Interpretation Conflict Vulnerability (CVE-2021-28474)
CVE-2021-28474
CWE-436
Medium
SharePoint CVE-2021-28453 Vulnerability (CVE-2021-28453)
CVE-2021-28453
-
Medium
PostgreSQL Improper Validation of Specified Type of Input Vulnerability (CVE-2026-2003)
CVE-2026-2003
CWE-1287
Medium
MySQL CVE-2020-14672 Vulnerability (CVE-2020-14672)
CVE-2020-14672
-
Medium
SharePoint CVE-2021-28450 Vulnerability (CVE-2021-28450)
CVE-2021-28450
-
Medium
MySQL CVE-2020-14680 Vulnerability (CVE-2020-14680)
CVE-2020-14680
-
Medium
OpenSSL Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') Vulnerability (CVE-2026-2673)
CVE-2026-2673
CWE-757
Medium
MySQL CVE-2020-14568 Vulnerability (CVE-2020-14568)
CVE-2020-14568
-
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28417)
CVE-2021-28417
CWE-707
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9747)
CVE-2026-9747
CWE-617
Medium
MySQL CVE-2020-14567 Vulnerability (CVE-2020-14567)
CVE-2020-14567
-
Medium
Python Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28359)
CVE-2021-28359
CWE-707
Medium
MySQL CVE-2020-14559 Vulnerability (CVE-2020-14559)
CVE-2020-14559
-
Medium
MySQL CVE-2020-14769 Vulnerability (CVE-2020-14769)
CVE-2020-14769
-
Medium
Chamilo Observable Response Discrepancy Vulnerability (CVE-2026-30876)
CVE-2026-30876
CWE-204
Medium
XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29459)
CVE-2021-29459
CWE-707
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-31859)
CVE-2026-31859
CWE-707
Medium
MySQL CVE-2020-14789 Vulnerability (CVE-2020-14789)
CVE-2020-14789
-
Medium
Craft CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-32262)
CVE-2026-32262
CWE-22
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-32201)
CVE-2026-32201
CWE-20
Medium
MySQL CVE-2021-2010 Vulnerability (CVE-2021-2010)
CVE-2021-2010
-
Medium
MySQL CVE-2021-2009 Vulnerability (CVE-2021-2009)
CVE-2021-2009
-
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27949)
CVE-2021-27949
CWE-707
Medium
Chamilo Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-31941)
CVE-2026-31941
CWE-918
Medium
MySQL CVE-2020-14786 Vulnerability (CVE-2020-14786)
CVE-2020-14786
-
Medium
MySQL CVE-2021-2006 Vulnerability (CVE-2021-2006)
CVE-2021-2006
-
Medium
Dolphin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27969)
CVE-2021-27969
CWE-707
Medium
MySQL CVE-2021-2002 Vulnerability (CVE-2021-2002)
CVE-2021-2002
-
Medium
MySQL CVE-2021-2001 Vulnerability (CVE-2021-2001)
CVE-2021-2001
-
Medium
MySQL CVE-2020-14550 Vulnerability (CVE-2020-14550)
CVE-2020-14550
-
Medium
MySQL CVE-2020-14785 Vulnerability (CVE-2020-14785)
CVE-2020-14785
-
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2021-28116)
CVE-2021-28116
CWE-125
Medium
IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-29701)
CVE-2021-29701
CWE-668
Medium
MySQL CVE-2020-14775 Vulnerability (CVE-2020-14775)
CVE-2020-14775
-
Medium
Grafana Other Vulnerability (CVE-2021-28147)
CVE-2021-28147
-
Medium
Grafana Incorrect Authorization Vulnerability (CVE-2021-28146)
CVE-2021-28146
CWE-863
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30882)
CVE-2026-30882
CWE-707
Medium
Oracle JRE CVE-2020-14556 Vulnerability (CVE-2020-14556)
CVE-2020-14556
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30894)
CVE-2026-30894
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-30895)
CVE-2026-30895
CWE-707
Medium
MySQL CVE-2020-14776 Vulnerability (CVE-2020-14776)
CVE-2020-14776
-
Medium
MySQL CVE-2020-14553 Vulnerability (CVE-2020-14553)
CVE-2020-14553
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29713)
CVE-2021-29713
CWE-707
Medium
Caddy Web Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27589)
CVE-2026-27589
CWE-352
Medium
MySQL CVE-2020-14777 Vulnerability (CVE-2020-14777)
CVE-2020-14777
-
Medium
MongoDb Cleartext Transmission of Sensitive Information Vulnerability (CVE-2026-9741)
CVE-2026-9741
CWE-319
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9752)
CVE-2026-9752
CWE-476
Medium
IBM RTC Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-29786)
CVE-2021-29786
CWE-312
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-29170)
CVE-2026-29170
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28556)
CVE-2021-28556
CWE-707
Medium
Oracle JRE CVE-2020-14792 Vulnerability (CVE-2020-14792)
CVE-2020-14792
-
Medium
Liferay Portal Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-29040)
CVE-2021-29040
CWE-209
Medium
Grafana Improper Access Control Vulnerability (CVE-2026-28374)
CVE-2026-28374
CWE-284
Medium
WebLogic CVE-2020-14640 Vulnerability (CVE-2020-14640)
CVE-2020-14640
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28781)
CVE-2026-28781
CWE-639
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29002)
CVE-2021-29002
CWE-707
Medium
MySQL CVE-2020-14597 Vulnerability (CVE-2020-14597)
CVE-2020-14597
-
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29008)
CVE-2021-29008
CWE-707
Medium
MySQL CVE-2020-14614 Vulnerability (CVE-2020-14614)
CVE-2020-14614
-
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375)
CVE-2026-28375
CWE-400
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29048)
CVE-2021-29048
CWE-707
Medium