Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2021-2011 Vulnerability (CVE-2021-2011)
CVE-2021-2011
-
Medium
MySQL CVE-2021-2012 Vulnerability (CVE-2021-2012)
CVE-2021-2012
-
Medium
Caddy Web Server Improper Input Validation Vulnerability (CVE-2026-27585)
CVE-2026-27585
CWE-20
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27889)
CVE-2021-27889
CWE-707
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-9735)
CVE-2026-9735
CWE-532
Medium
MySQL CVE-2020-14794 Vulnerability (CVE-2020-14794)
CVE-2020-14794
-
Medium
MySQL CVE-2020-14799 Vulnerability (CVE-2020-14799)
CVE-2020-14799
-
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)
CVE-2026-27199
CWE-67
Medium
MySQL CVE-2020-14547 Vulnerability (CVE-2020-14547)
CVE-2020-14547
-
Medium
MySQL CVE-2021-2016 Vulnerability (CVE-2021-2016)
CVE-2021-2016
-
Medium
Pega Infinity CVE-2021-27653 Vulnerability (CVE-2021-27653)
CVE-2021-27653
-
Medium
MySQL CVE-2020-14540 Vulnerability (CVE-2020-14540)
CVE-2020-14540
-
Medium
MySQL CVE-2020-14539 Vulnerability (CVE-2020-14539)
CVE-2020-14539
-
Medium
Python Uncontrolled Resource Consumption Vulnerability (CVE-2020-14422)
CVE-2020-14422
CWE-400
Medium
Django Inefficient Algorithmic Complexity Vulnerability (CVE-2026-33033)
CVE-2026-33033
CWE-407
Medium
Atlassian Jira CVE-2021-26081 Vulnerability (CVE-2021-26081)
CVE-2021-26081
-
Medium
MySQL CVE-2021-2022 Vulnerability (CVE-2021-2022)
CVE-2021-2022
-
Medium
Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-26086)
CVE-2021-26086
CWE-22
Medium
Atlassian Confluence Missing Authorization Vulnerability (CVE-2021-26085)
CVE-2021-26085
CWE-862
Medium
Craft CMS Improper Authorization Vulnerability (CVE-2026-33162)
CVE-2026-33162
CWE-285
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33167)
CVE-2026-33167
CWE-707
Medium
MySQL CVE-2020-14812 Vulnerability (CVE-2020-14812)
CVE-2020-14812
-
Medium
MySQL CVE-2020-14814 Vulnerability (CVE-2020-14814)
CVE-2020-14814
-
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26083)
CVE-2021-26083
CWE-707
Medium
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-33161)
CVE-2026-33161
CWE-200
Medium
MySQL CVE-2021-2024 Vulnerability (CVE-2021-2024)
CVE-2021-2024
-
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26082)
CVE-2021-26082
CWE-707
Medium
Ruby on Rails Uncontrolled Resource Consumption Vulnerability (CVE-2026-33169)
CVE-2026-33169
CWE-400
Medium
MySQL CVE-2020-14821 Vulnerability (CVE-2020-14821)
CVE-2020-14821
-
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33170)
CVE-2026-33170
CWE-707
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14340)
CVE-2020-14340
CWE-400
Medium
CKEditor Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-26271)
CVE-2021-26271
CWE-829
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33160)
CVE-2026-33160
CWE-639
Medium
SharePoint CVE-2021-27052 Vulnerability (CVE-2021-27052)
CVE-2021-27052
-
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26746)
CVE-2021-26746
CWE-707
Medium
MySQL CVE-2021-2020 Vulnerability (CVE-2021-2020)
CVE-2021-2020
-
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33051)
CVE-2026-33051
CWE-707
Medium
osTicket Observable Discrepancy Vulnerability (CVE-2026-26895)
CVE-2026-26895
CWE-203
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26925)
CVE-2021-26925
CWE-707
Medium
MySQL CVE-2021-2021 Vulnerability (CVE-2021-2021)
CVE-2021-2021
-
Medium
Omeka Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26799)
CVE-2021-26799
CWE-707
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-26311)
CVE-2026-26311
CWE-416
Medium
Craft CMS Missing Authentication for Critical Function Vulnerability (CVE-2026-33159)
CVE-2026-33159
CWE-306
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33113)
CVE-2026-33113
CWE-707
Medium
Chamilo Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33141)
CVE-2026-33141
CWE-639
Medium
CKEditor Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-26272)
CVE-2021-26272
CWE-829
Medium
MySQL CVE-2020-14804 Vulnerability (CVE-2020-14804)
CVE-2020-14804
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33158)
CVE-2026-33158
CWE-639
Medium
MySQL CVE-2020-14809 Vulnerability (CVE-2020-14809)
CVE-2020-14809
-
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-28418)
CVE-2021-28418
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2221)
CVE-2020-2221
CWE-707
Medium
CakePHP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15400)
CVE-2020-15400
CWE-352
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25797)
CVE-2020-25797
CWE-707
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2020-25701)
CVE-2020-25701
CWE-863
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25702)
CVE-2020-25702
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-25703)
CVE-2020-25703
CWE-200
Medium
Django Buffer Access with Incorrect Length Value Vulnerability (CVE-2026-53877)
CVE-2026-53877
CWE-805
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-6575)
CVE-2026-6575
CWE-126
Medium
Contao Improper Input Validation Vulnerability (CVE-2020-25768)
CVE-2020-25768
CWE-20
Medium
Django Improper Neutralization of Line Delimiters Vulnerability (CVE-2026-53878)
CVE-2026-53878
CWE-144
Medium
SharePoint External Control of File Name or Path Vulnerability (CVE-2026-54108)
CVE-2026-54108
CWE-73
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-54264)
CVE-2026-54264
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54265)
CVE-2026-54265
CWE-707
Medium
PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-6735)
CVE-2026-6735
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25798)
CVE-2020-25798
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25799)
CVE-2020-25799
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35987)
CVE-2020-35987
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35986)
CVE-2020-35986
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35985)
CVE-2020-35985
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35984)
CVE-2020-35984
CWE-707
Medium
Angular Use of Weak Hash Vulnerability (CVE-2026-54266)
CVE-2026-54266
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-54267)
CVE-2026-54267
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25812)
CVE-2020-25812
CWE-707
Medium
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-25700)
CVE-2020-25700
CWE-138
Medium
Jenkins Missing Encryption of Sensitive Data Vulnerability (CVE-2026-53442)
CVE-2026-53442
CWE-311
Medium