Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29009)
CVE-2021-29009
CWE-707
Medium
WebLogic CVE-2020-14638 Vulnerability (CVE-2020-14638)
CVE-2020-14638
-
Medium
Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28376)
CVE-2026-28376
CWE-770
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29010)
CVE-2021-29010
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29039)
CVE-2021-29039
CWE-707
Medium
Grafana Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-28379)
CVE-2026-28379
CWE-362
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28782)
CVE-2026-28782
CWE-639
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29046)
CVE-2021-29046
CWE-707
Medium
MySQL CVE-2020-14623 Vulnerability (CVE-2020-14623)
CVE-2020-14623
-
Medium
MySQL CVE-2020-14624 Vulnerability (CVE-2020-14624)
CVE-2020-14624
-
Medium
Grafana Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-28383)
CVE-2026-28383
CWE-770
Medium
MySQL CVE-2020-14631 Vulnerability (CVE-2020-14631)
CVE-2020-14631
-
Medium
MySQL CVE-2020-14620 Vulnerability (CVE-2020-14620)
CVE-2020-14620
-
Medium
Grafana Missing Authorization Vulnerability (CVE-2026-28380)
CVE-2026-28380
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29045)
CVE-2021-29045
CWE-707
Medium
WebLogic CVE-2020-14637 Vulnerability (CVE-2020-14637)
CVE-2020-14637
-
Medium
MySQL CVE-2020-14632 Vulnerability (CVE-2020-14632)
CVE-2020-14632
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29044)
CVE-2021-29044
CWE-707
Medium
MySQL CVE-2020-14619 Vulnerability (CVE-2020-14619)
CVE-2020-14619
-
Medium
Liferay Portal Insufficiently Protected Credentials Vulnerability (CVE-2021-29043)
CVE-2021-29043
CWE-522
Medium
WebLogic CVE-2020-14636 Vulnerability (CVE-2020-14636)
CVE-2020-14636
-
Medium
Liferay DXP CVE-2021-29041 Vulnerability (CVE-2021-29041)
CVE-2021-29041
-
Medium
MySQL CVE-2020-14591 Vulnerability (CVE-2020-14591)
CVE-2020-14591
-
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-28343)
CVE-2026-28343
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-29450)
CVE-2021-29450
CWE-200
Medium
Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)
CVE-2021-28652
CWE-401
Medium
silverstripeCMS Incorrect Authorization Vulnerability (CVE-2021-28661)
CVE-2021-28661
CWE-863
Medium
MySQL CVE-2020-14576 Vulnerability (CVE-2020-14576)
CVE-2020-14576
-
Medium
Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28658)
CVE-2021-28658
CWE-22
Medium
Grafana Out-of-bounds Write Vulnerability (CVE-2026-27879)
CVE-2026-27879
CWE-787
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9748)
CVE-2026-9748
CWE-617
Medium
MySQL CVE-2020-14575 Vulnerability (CVE-2020-14575)
CVE-2020-14575
-
Medium
MySQL CVE-2020-14656 Vulnerability (CVE-2020-14656)
CVE-2020-14656
-
Medium
MySQL CVE-2020-14654 Vulnerability (CVE-2020-14654)
CVE-2020-14654
-
Medium
WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14572)
CVE-2020-14572
CWE-707
Medium
Magento Improper Input Validation Vulnerability (CVE-2021-28585)
CVE-2021-28585
CWE-20
Medium
WordPress Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-29447)
CVE-2021-29447
CWE-611
Medium
Magento Violation of Secure Design Principles Vulnerability (CVE-2021-28583)
CVE-2021-28583
CWE-657
Medium
Magento Incorrect Authorization Vulnerability (CVE-2021-28567)
CVE-2021-28567
CWE-863
Medium
Magento Improper Authorization Vulnerability (CVE-2021-28563)
CVE-2021-28563
CWE-285
Medium
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-28662)
CVE-2021-28662
CWE-116
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9749)
CVE-2026-9749
CWE-617
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29049)
CVE-2021-29049
CWE-707
Medium
Next.js Missing Origin Validation in WebSockets Vulnerability (CVE-2026-27977)
CVE-2026-27977
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29051)
CVE-2021-29051
CWE-707
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14641)
CVE-2020-14641
CWE-200
Medium
Next.js Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27978)
CVE-2026-27978
CWE-352
Medium
MySQL CVE-2020-14643 Vulnerability (CVE-2020-14643)
CVE-2020-14643
-
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-29052)
CVE-2021-29052
CWE-276
Medium
MySQL CVE-2020-14651 Vulnerability (CVE-2020-14651)
CVE-2020-14651
-
Medium
Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-29057)
CVE-2026-29057
-
Medium
WebLogic CVE-2020-14652 Vulnerability (CVE-2020-14652)
CVE-2020-14652
-
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29159)
CVE-2021-29159
CWE-707
Medium
MySQL CVE-2020-14586 Vulnerability (CVE-2020-14586)
CVE-2020-14586
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-29069)
CVE-2026-29069
CWE-639
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-27970)
CVE-2026-27970
CWE-707
Medium
WebLogic Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-29425)
CVE-2021-29425
CWE-22
Medium
Craft CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-29113)
CVE-2026-29113
CWE-352
Medium
MySQL CVE-2020-14790 Vulnerability (CVE-2020-14790)
CVE-2020-14790
-
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-32629)
CVE-2026-32629
CWE-707
Medium
SharePoint CVE-2021-24104 Vulnerability (CVE-2021-24104)
CVE-2021-24104
-
Medium
MySQL CVE-2020-14838 Vulnerability (CVE-2020-14838)
CVE-2020-14838
-
Medium
MySQL CVE-2021-2032 Vulnerability (CVE-2021-2032)
CVE-2021-2032
-
Medium
Joomla CVE-2021-26031 Vulnerability (CVE-2021-26031)
CVE-2021-26031
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26032)
CVE-2021-26032
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14184)
CVE-2020-14184
CWE-707
Medium
Atlassian Jira Missing Authorization Vulnerability (CVE-2020-14185)
CVE-2020-14185
CWE-862
Medium
MySQL CVE-2021-2031 Vulnerability (CVE-2021-2031)
CVE-2021-2031
-
Medium
MySQL CVE-2021-2030 Vulnerability (CVE-2021-2030)
CVE-2021-2030
-
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33375)
CVE-2026-33375
CWE-400
Medium
MySQL CVE-2021-2028 Vulnerability (CVE-2021-2028)
CVE-2021-2028
-
Medium
Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-14193)
CVE-2020-14193
CWE-138
Medium
Joomla Cross-Site Request Forgery (CSRF) (CVE-2021-26033)
CVE-2021-26033
CWE-352
Medium
MySQL CVE-2020-14839 Vulnerability (CVE-2020-14839)
CVE-2020-14839
-
Medium
Dolibarr Improper Privilege Management Vulnerability (CVE-2020-14201)
CVE-2020-14201
CWE-269
Medium