Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
GeoServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23818)
CVE-2024-23818
CWE-707
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-30875)
CVE-2022-30875
CWE-707
Medium
GeoServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23821)
CVE-2024-23821
CWE-707
Medium
jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)
CVE-2022-31160
CWE-707
Medium
Moodle CVE-2022-30598 Vulnerability (CVE-2022-30598)
CVE-2022-30598
-
Medium
Moodle Other Vulnerability (CVE-2022-30597)
CVE-2022-30597
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-30596)
CVE-2022-30596
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-24574)
CVE-2024-24574
CWE-707
Medium
SharePoint CVE-2022-30172 Vulnerability (CVE-2022-30172)
CVE-2022-30172
-
Medium
SharePoint CVE-2022-30171 Vulnerability (CVE-2022-30171)
CVE-2022-30171
-
Medium
SharePoint CVE-2022-30159 Vulnerability (CVE-2022-30159)
CVE-2022-30159
-
Medium
SharePoint CVE-2022-30158 Vulnerability (CVE-2022-30158)
CVE-2022-30158
-
Medium
SharePoint CVE-2022-30157 Vulnerability (CVE-2022-30157)
CVE-2022-30157
-
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2924)
CVE-2022-2924
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2890)
CVE-2022-2890
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2885)
CVE-2022-2885
CWE-707
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2829)
CVE-2022-2829
CWE-707
Medium
Jboss EAP CVE-2022-2764 Vulnerability (CVE-2022-2764)
CVE-2022-2764
-
Medium
jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)
CVE-2022-31160
CWE-707
Medium
jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)
CVE-2022-31160
CWE-707
Medium
Apache Tomcat Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-21733)
CVE-2024-21733
CWE-209
Medium
CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-22910)
CVE-2024-22910
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34171)
CVE-2022-34171
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34170)
CVE-2022-34170
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21908)
CVE-2024-21908
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21910)
CVE-2024-21910
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21911)
CVE-2024-21911
CWE-707
Medium
Nginx Use After Free Vulnerability (CVE-2022-32414)
CVE-2022-32414
CWE-416
Medium
phpMyFAQ Improper Access Control Vulnerability (CVE-2024-22202)
CVE-2024-22202
CWE-284
Medium
phpMyFAQ Incorrect Authorization Vulnerability (CVE-2024-22208)
CVE-2024-22208
CWE-863
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-32074)
CVE-2022-32074
CWE-707
Medium
Seo Panel Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-22643)
CVE-2024-22643
CWE-352
Medium
Seo Panel Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-22646)
CVE-2024-22646
CWE-209
Medium
Seo Panel Observable Discrepancy Vulnerability (CVE-2024-22647)
CVE-2024-22647
CWE-203
Medium
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-22648)
CVE-2024-22648
CWE-918
Medium
osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-22724)
CVE-2024-22724
CWE-94
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23171)
CVE-2024-23171
CWE-707
Medium
Squid Operation on a Resource after Expiration or Release Vulnerability (CVE-2024-23638)
CVE-2024-23638
CWE-672
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23172)
CVE-2024-23172
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23173)
CVE-2024-23173
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23174)
CVE-2024-23174
CWE-707
Medium
PHP CVE-2022-31629 Vulnerability (CVE-2022-31629)
CVE-2022-31629
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23177)
CVE-2024-23177
CWE-707
Medium
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-31628)
CVE-2022-31628
CWE-835
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23178)
CVE-2024-23178
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23179)
CVE-2024-23179
CWE-707
Medium
Nginx Use After Free Vulnerability (CVE-2022-31307)
CVE-2022-31307
CWE-416
Medium
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2024-23323)
CVE-2024-23323
CWE-400
Medium
XWiki Missing Authorization Vulnerability (CVE-2022-31167)
CVE-2022-31167
CWE-862
Medium
MyBB CVE-2024-23335 Vulnerability (CVE-2024-23335)
CVE-2024-23335
-
Medium
MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-23336)
CVE-2024-23336
CWE-918
Medium
GeoServer Other Vulnerability (CVE-2024-23634)
CVE-2024-23634
-
Medium
MySQL CVE-2024-21200 Vulnerability (CVE-2024-21200)
CVE-2024-21200
-
Medium
Apache HTTP Server Interpretation Conflict Vulnerability (CVE-2022-37436)
CVE-2022-37436
CWE-436
Medium
Apache HTTP Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2024-24795)
CVE-2024-24795
CWE-707
Medium
MySQL CVE-2024-20981 Vulnerability (CVE-2024-20981)
CVE-2024-20981
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42110)
CVE-2022-42110
CWE-707
Medium
MySQL CVE-2024-20961 Vulnerability (CVE-2024-20961)
CVE-2024-20961
-
Medium
MySQL CVE-2024-20963 Vulnerability (CVE-2024-20963)
CVE-2024-20963
-
Medium
MySQL CVE-2024-20965 Vulnerability (CVE-2024-20965)
CVE-2024-20965
-
Medium
XWiki Other Vulnerability (CVE-2022-41935)
CVE-2022-41935
-
Medium
MySQL CVE-2024-20967 Vulnerability (CVE-2024-20967)
CVE-2024-20967
-
Medium
MySQL CVE-2024-20969 Vulnerability (CVE-2024-20969)
CVE-2024-20969
-
Medium
XWiki Insufficiently Protected Credentials Vulnerability (CVE-2022-41933)
CVE-2022-41933
CWE-522
Medium
XWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-41932)
CVE-2022-41932
CWE-770
Medium
MySQL CVE-2024-20971 Vulnerability (CVE-2024-20971)
CVE-2024-20971
-
Medium
MySQL CVE-2024-20973 Vulnerability (CVE-2024-20973)
CVE-2024-20973
-
Medium
XWiki Missing Authorization Vulnerability (CVE-2022-41929)
CVE-2022-41929
CWE-862
Medium
MySQL CVE-2024-20975 Vulnerability (CVE-2024-20975)
CVE-2024-20975
-
Medium
MySQL CVE-2024-20977 Vulnerability (CVE-2024-20977)
CVE-2024-20977
-
Medium
MediaWiki CVE-2022-41767 Vulnerability (CVE-2022-41767)
CVE-2022-41767
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42111)
CVE-2022-42111
CWE-707
Medium
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2022-41766)
CVE-2022-41766
CWE-732
Medium
MediaWiki Observable Discrepancy Vulnerability (CVE-2022-41765)
CVE-2022-41765
CWE-203
Medium
MySQL CVE-2024-20983 Vulnerability (CVE-2024-20983)
CVE-2024-20983
-
Medium