Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375)
CVE-2026-28375
CWE-400
Medium
MySQL CVE-2020-2853 Vulnerability (CVE-2020-2853)
CVE-2020-2853
-
Medium
MySQL CVE-2020-14597 Vulnerability (CVE-2020-14597)
CVE-2020-14597
-
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-28343)
CVE-2026-28343
CWE-707
Medium
MySQL CVE-2020-14614 Vulnerability (CVE-2020-14614)
CVE-2020-14614
-
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26934)
CVE-2020-26934
CWE-707
Medium
MySQL CVE-2020-2897 Vulnerability (CVE-2020-2897)
CVE-2020-2897
-
Medium
MySQL CVE-2020-14619 Vulnerability (CVE-2020-14619)
CVE-2020-14619
-
Medium
MySQL CVE-2020-14620 Vulnerability (CVE-2020-14620)
CVE-2020-14620
-
Medium
MySQL CVE-2020-2896 Vulnerability (CVE-2020-2896)
CVE-2020-2896
-
Medium
MySQL CVE-2020-2895 Vulnerability (CVE-2020-2895)
CVE-2020-2895
-
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Grafana Improper Access Control Vulnerability (CVE-2026-28374)
CVE-2026-28374
CWE-284
Medium
MySQL CVE-2020-2893 Vulnerability (CVE-2020-2893)
CVE-2020-2893
-
Medium
MySQL CVE-2020-2892 Vulnerability (CVE-2020-2892)
CVE-2020-2892
-
Medium
Oracle JRE CVE-2020-14621 Vulnerability (CVE-2020-14621)
CVE-2020-14621
-
Medium
WebLogic CVE-2020-14622 Vulnerability (CVE-2020-14622)
CVE-2020-14622
-
Medium
MySQL CVE-2020-14623 Vulnerability (CVE-2020-14623)
CVE-2020-14623
-
Medium
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-33033)
CVE-2026-33033
CWE-407
Medium
WebLogic CVE-2020-2869 Vulnerability (CVE-2020-2869)
CVE-2020-2869
-
Medium
MySQL CVE-2020-14624 Vulnerability (CVE-2020-14624)
CVE-2020-14624
-
Medium
WebLogic CVE-2020-2966 Vulnerability (CVE-2020-2966)
CVE-2020-2966
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26227)
CVE-2020-26227
CWE-707
Medium
WebLogic CVE-2020-14640 Vulnerability (CVE-2020-14640)
CVE-2020-14640
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-25901)
CVE-2026-25901
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25799)
CVE-2020-25799
CWE-707
Medium
Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-25854)
CVE-2026-25854
CWE-601
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14184)
CVE-2020-14184
CWE-707
Medium
Atlassian Jira Missing Authorization Vulnerability (CVE-2020-14185)
CVE-2020-14185
CWE-862
Medium
Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-14193)
CVE-2020-14193
CWE-138
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35480)
CVE-2020-35480
CWE-200
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-25900)
CVE-2026-25900
CWE-707
Medium
XWikiplatform Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2026-26000)
CVE-2026-26000
CWE-1021
Medium
MySQL CVE-2020-14829 Vulnerability (CVE-2020-14829)
CVE-2020-14829
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25812)
CVE-2020-25812
CWE-707
Medium
Dolibarr Improper Privilege Management Vulnerability (CVE-2020-14201)
CVE-2020-14201
CWE-269
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35479)
CVE-2020-35479
CWE-707
Medium
MediaWiki CVE-2020-25813 Vulnerability (CVE-2020-25813)
CVE-2020-25813
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25814)
CVE-2020-25814
CWE-707
Medium
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-26047)
CVE-2026-26047
CWE-770
Medium
Jboss EAP Improper Authentication Vulnerability (CVE-2020-14299)
CVE-2020-14299
CWE-287
Medium
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14181)
CVE-2020-14181
CWE-200
Medium
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14175)
CVE-2020-14175
CWE-707
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2020-35477)
CVE-2020-35477
CWE-20
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14164)
CVE-2020-14164
CWE-707
Medium
MongoDb Missing Authorization Vulnerability (CVE-2026-25609)
CVE-2026-25609
CWE-862
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-25703)
CVE-2020-25703
CWE-200
Medium
MySQL CVE-2020-14836 Vulnerability (CVE-2020-14836)
CVE-2020-14836
-
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14012)
CVE-2020-14012
CWE-707
Medium
Contao Improper Input Validation Vulnerability (CVE-2020-25768)
CVE-2020-25768
CWE-20
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25797)
CVE-2020-25797
CWE-707
Medium
Squid Improper Synchronization Vulnerability (CVE-2020-14059)
CVE-2020-14059
CWE-662
Medium
Atlassian Jira CVE-2020-14165 Vulnerability (CVE-2020-14165)
CVE-2020-14165
-
Medium
Atlassian Jira Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2020-14174)
CVE-2020-14174
CWE-639
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14166)
CVE-2020-14166
CWE-707
Medium
MySQL CVE-2020-14830 Vulnerability (CVE-2020-14830)
CVE-2020-14830
-
Medium
Atlassian Jira CVE-2020-14168 Vulnerability (CVE-2020-14168)
CVE-2020-14168
-
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-25610)
CVE-2026-25610
CWE-617
Medium
MongoDb Incorrect Type Conversion or Cast Vulnerability (CVE-2026-25613)
CVE-2026-25613
CWE-704
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14169)
CVE-2020-14169
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25798)
CVE-2020-25798
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14173)
CVE-2020-14173
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35478)
CVE-2020-35478
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25815)
CVE-2020-25815
CWE-707
Medium
Caddy Web Server Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-27589)
CVE-2026-27589
CWE-352
Medium
Craft CMS Missing Authentication for Critical Function Vulnerability (CVE-2026-33159)
CVE-2026-33159
CWE-306
Medium
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27128)
CVE-2026-27128
CWE-367
Medium
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-33161)
CVE-2026-33161
CWE-200
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-27129)
CVE-2026-27129
CWE-918
Medium
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7259)
CVE-2026-7259
CWE-476
Medium
qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26166)
CVE-2020-26166
CWE-707
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33160)
CVE-2026-33160
CWE-639
Medium
Python Uncontrolled Resource Consumption Vulnerability (CVE-2020-14422)
CVE-2020-14422
CWE-400
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)
CVE-2026-27199
CWE-67
Medium
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27127)
CVE-2026-27127
CWE-367
Medium