🚀 Just launched:
Invicti Agentic Pentest.
The future of penetration testing is here. Read the announcement.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ Known Vulnerabilities
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
Known Vulnerabilities
This page lists
15405 vulnerabilities
in this category.
Critical: 1674
High: 4167
Medium: 8767
Low: 793
Information: 4
Vulnerability Name
CVE
CWE
Severity
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364)
CVE-2024-34364
CWE-787
Medium
TYPO3 CVE-2024-34537 Vulnerability (CVE-2024-34537)
CVE-2024-34537
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34500)
CVE-2024-34500
CWE-707
Medium
SharePoint CVE-2023-21743 Vulnerability (CVE-2023-21743)
CVE-2023-21743
-
Medium
Oracle JRE CVE-2023-21830 Vulnerability (CVE-2023-21830)
CVE-2023-21830
-
Medium
Oracle JRE CVE-2023-21835 Vulnerability (CVE-2023-21835)
CVE-2023-21835
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34468)
CVE-2024-34468
CWE-707
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2024-34362)
CVE-2024-34362
CWE-416
Medium
MySQL CVE-2023-21881 Vulnerability (CVE-2023-21881)
CVE-2023-21881
-
Medium
MySQL CVE-2023-21875 Vulnerability (CVE-2023-21875)
CVE-2023-21875
-
Medium
MySQL CVE-2023-21876 Vulnerability (CVE-2023-21876)
CVE-2023-21876
-
Medium
MySQL CVE-2023-21877 Vulnerability (CVE-2023-21877)
CVE-2023-21877
-
Medium
MySQL CVE-2023-21878 Vulnerability (CVE-2023-21878)
CVE-2023-21878
-
Medium
MySQL CVE-2023-21879 Vulnerability (CVE-2023-21879)
CVE-2023-21879
-
Medium
MySQL CVE-2023-21880 Vulnerability (CVE-2023-21880)
CVE-2023-21880
-
Medium
MySQL CVE-2023-21977 Vulnerability (CVE-2023-21977)
CVE-2023-21977
-
Medium
Moodle CVE-2024-34003 Vulnerability (CVE-2024-34003)
CVE-2024-34003
-
Medium
Oracle Database Server CVE-2023-22073 Vulnerability (CVE-2023-22073)
CVE-2023-22073
-
Medium
Oracle JRE CVE-2023-22041 Vulnerability (CVE-2023-22041)
CVE-2023-22041
-
Medium
Oracle Database Server CVE-2023-22071 Vulnerability (CVE-2023-22071)
CVE-2023-22071
-
Medium
MySQL CVE-2023-22070 Vulnerability (CVE-2023-22070)
CVE-2023-22070
-
Medium
MySQL CVE-2023-22068 Vulnerability (CVE-2023-22068)
CVE-2023-22068
-
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-32464)
CVE-2024-32464
CWE-707
Medium
MySQL CVE-2023-22066 Vulnerability (CVE-2023-22066)
CVE-2023-22066
-
Medium
MySQL CVE-2023-22065 Vulnerability (CVE-2023-22065)
CVE-2023-22065
-
Medium
MySQL CVE-2023-22064 Vulnerability (CVE-2023-22064)
CVE-2023-22064
-
Medium
MySQL CVE-2023-22059 Vulnerability (CVE-2023-22059)
CVE-2023-22059
-
Medium
MySQL CVE-2023-22058 Vulnerability (CVE-2023-22058)
CVE-2023-22058
-
Medium
MySQL CVE-2023-22057 Vulnerability (CVE-2023-22057)
CVE-2023-22057
-
Medium
MySQL CVE-2023-22056 Vulnerability (CVE-2023-22056)
CVE-2023-22056
-
Medium
MySQL CVE-2023-22054 Vulnerability (CVE-2023-22054)
CVE-2023-22054
-
Medium
MySQL CVE-2023-22053 Vulnerability (CVE-2023-22053)
CVE-2023-22053
-
Medium
MySQL CVE-2023-22046 Vulnerability (CVE-2023-22046)
CVE-2023-22046
-
Medium
WebLogic CVE-2023-22040 Vulnerability (CVE-2023-22040)
CVE-2023-22040
-
Medium
Moodle CVE-2024-34002 Vulnerability (CVE-2024-34002)
CVE-2024-34002
-
Medium
MySQL CVE-2023-22015 Vulnerability (CVE-2023-22015)
CVE-2023-22015
-
Medium
MySQL CVE-2023-21982 Vulnerability (CVE-2023-21982)
CVE-2023-21982
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34000)
CVE-2024-34000
CWE-707
Medium
MySQL CVE-2023-22005 Vulnerability (CVE-2023-22005)
CVE-2023-22005
-
Medium
MySQL CVE-2023-22007 Vulnerability (CVE-2023-22007)
CVE-2023-22007
-
Medium
MySQL CVE-2023-22008 Vulnerability (CVE-2023-22008)
CVE-2023-22008
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33998)
CVE-2024-33998
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-33997)
CVE-2024-33997
CWE-707
Medium
Oracle Database Server CVE-2023-22034 Vulnerability (CVE-2023-22034)
CVE-2023-22034
-
Medium
MySQL CVE-2023-22026 Vulnerability (CVE-2023-22026)
CVE-2023-22026
-
Medium
MySQL CVE-2023-22028 Vulnerability (CVE-2023-22028)
CVE-2023-22028
-
Medium
WebLogic CVE-2023-22031 Vulnerability (CVE-2023-22031)
CVE-2023-22031
-
Medium
MySQL CVE-2023-22032 Vulnerability (CVE-2023-22032)
CVE-2023-22032
-
Medium
MySQL CVE-2023-22033 Vulnerability (CVE-2023-22033)
CVE-2023-22033
-
Medium
Moodle CVE-2024-33996 Vulnerability (CVE-2024-33996)
CVE-2024-33996
-
Medium
Liferay Portal Improper Certificate Validation Vulnerability (CVE-2022-42131)
CVE-2022-42131
CWE-295
Medium
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2022-42130)
CVE-2022-42130
CWE-276
Medium
Jetty CVE-2023-26049 Vulnerability (CVE-2023-26049)
CVE-2023-26049
-
Medium
PHP CVE-2022-31629 Vulnerability (CVE-2022-31629)
CVE-2022-31629
-
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-55892)
CVE-2024-55892
CWE-601
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55893)
CVE-2024-55893
CWE-749
Medium
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-55894)
CVE-2024-55894
CWE-352
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55920)
CVE-2024-55920
CWE-749
Medium
Nginx Use After Free Vulnerability (CVE-2022-32414)
CVE-2022-32414
CWE-416
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55922)
CVE-2024-55922
CWE-749
Medium
TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55923)
CVE-2024-55923
CWE-749
Medium
osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-32074)
CVE-2022-32074
CWE-707
Medium
TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-55945)
CVE-2024-55945
CWE-352
Medium
Apache Traffic Server CVE-2024-56195 Vulnerability (CVE-2024-56195)
CVE-2024-56195
-
Medium
Apache Traffic Server CVE-2024-56196 Vulnerability (CVE-2024-56196)
CVE-2024-56196
-
Medium
Apache Traffic Server CVE-2024-56202 Vulnerability (CVE-2024-56202)
CVE-2024-56202
-
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-56332)
CVE-2024-56332
CWE-770
Medium
Roundcube Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2024-57004)
CVE-2024-57004
CWE-707
Medium
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-31628)
CVE-2022-31628
CWE-835
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34170)
CVE-2022-34170
CWE-707
Medium
PHP Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-5458)
CVE-2024-5458
CWE-345
Medium
Nginx Use After Free Vulnerability (CVE-2022-31307)
CVE-2022-31307
CWE-416
Medium
XWiki Missing Authorization Vulnerability (CVE-2022-31167)
CVE-2022-31167
CWE-862
Medium
Nexus Repository Manager Use of Hard-coded Credentials Vulnerability (CVE-2024-5764)
CVE-2024-5764
CWE-798
Medium
jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)
CVE-2022-31160
CWE-707
Medium
«
1
...
97
98
99
...
206
»