Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23409 vulnerabilities in this category.

Critical: 1513 High: 12591 Medium: 8518 Low: 783 Information: 4
Vulnerability Name
CVE
CWE
Severity
CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)
CVE-2023-31541
CWE-434
Critical
PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-31672)
CVE-2023-31672
CWE-138
Critical
OpenSSL Other Vulnerability (CVE-2016-0705)
CVE-2016-0705
-
Critical
MySQL Other Vulnerability (CVE-2016-0705)
CVE-2016-0705
-
Critical
GlassFish CVE-2011-0807 Vulnerability (CVE-2011-0807)
CVE-2011-0807
-
Critical
Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0718)
CVE-2016-0718
CWE-119
Critical
Nginx Other Vulnerability (CVE-2016-0746)
CVE-2016-0746
-
Critical
silverstripeCMS Other Vulnerability (CVE-2007-2321)
CVE-2007-2321
-
Critical
Cherokee Out-of-bounds Write Vulnerability (CVE-2019-20800)
CVE-2019-20800
CWE-787
Critical
Oracle Database Server Other Vulnerability (CVE-2007-2130)
CVE-2007-2130
-
Critical
Oracle Application Server Other Vulnerability (CVE-2007-2130)
CVE-2007-2130
-
Critical
Oracle Application Server Other Vulnerability (CVE-2007-2123)
CVE-2007-2123
-
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-10160)
CVE-2016-10160
CWE-119
Critical
SharePoint CVE-2020-17118 Vulnerability (CVE-2020-17118)
CVE-2020-17118
-
Critical
Play Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-3630)
CVE-2014-3630
CWE-611
Critical
Ruby Other Vulnerability (CVE-2016-2336)
CVE-2016-2336
-
Critical
PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19594)
CVE-2019-19594
CWE-434
Critical
OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2016-2177)
CVE-2016-2177
CWE-190
Critical
PHP Other Vulnerability (CVE-2007-0448)
CVE-2007-0448
-
Critical
WordPress Other Vulnerability (CVE-2021-44223)
CVE-2021-44223
-
Critical
OpenSSL Out-of-bounds Write Vulnerability (CVE-2016-2182)
CVE-2016-2182
CWE-787
Critical
Sqlite Incorrect Conversion between Numeric Types Vulnerability (CVE-2019-19317)
CVE-2019-19317
CWE-681
Critical
Oracle JRE CVE-2014-2410 Vulnerability (CVE-2014-2410)
CVE-2014-2410
-
Critical
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19212)
CVE-2019-19212
CWE-707
Critical
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-37277)
CVE-2023-37277
CWE-352
Critical
Roundcube Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-44026)
CVE-2021-44026
CWE-138
Critical
MediaWiki CVE-2023-37303 Vulnerability (CVE-2023-37303)
CVE-2023-37303
-
Critical
Ruby Other Vulnerability (CVE-2016-2337)
CVE-2016-2337
-
Critical
SharePoint Improper Input Validation Vulnerability (CVE-2011-1989)
CVE-2011-1989
CWE-20
Critical
Ruby Out-of-bounds Write Vulnerability (CVE-2016-2338)
CVE-2016-2338
CWE-787
Critical
Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2339)
CVE-2016-2339
CWE-119
Critical
Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-2355)
CVE-2016-2355
CWE-138
Critical
Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935)
CVE-2019-18935
CWE-502
Critical
Oracle JRE CVE-2014-2397 Vulnerability (CVE-2014-2397)
CVE-2014-2397
-
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2554)
CVE-2016-2554
CWE-119
Critical
ATutor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-2555)
CVE-2016-2555
CWE-138
Critical
Envoy Proxy CVE-2019-18802 Vulnerability (CVE-2019-18802)
CVE-2019-18802
-
Critical
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)
CVE-2019-18801
CWE-787
Critical
Lighttpd Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-2323)
CVE-2014-2323
CWE-138
Critical
phpMyAdmin Other Vulnerability (CVE-2007-0203)
CVE-2007-0203
-
Critical
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2842)
CVE-2016-2842
CWE-119
Critical
PrestaShop Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19595)
CVE-2019-19595
CWE-434
Critical
phpMyAdmin CVE-2019-19617 Vulnerability (CVE-2019-19617)
CVE-2019-19617
-
Critical
GibbonEdu Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-34598)
CVE-2023-34598
CWE-22
Critical
Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19213)
CVE-2020-19213
CWE-138
Critical
WordPress Improper Input Validation Vulnerability (CVE-2019-20041)
CVE-2019-20041
CWE-20
Critical
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-34944)
CVE-2023-34944
CWE-434
Critical
Chamilo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2023-34960)
CVE-2023-34960
CWE-138
Critical
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-1581)
CVE-2007-1581
CWE-94
Critical
SugarCRM Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-3244)
CVE-2014-3244
CWE-611
Critical
GeoServer CVE-2023-35042 Vulnerability (CVE-2023-35042)
CVE-2023-35042
-
Critical
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10752)
CVE-2016-10752
CWE-434
Critical
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2816)
CVE-2014-2816
CWE-264
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1283)
CVE-2016-1283
CWE-119
Critical
PHP Other Vulnerability (CVE-2007-1399)
CVE-2007-1399
-
Critical
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-19138)
CVE-2020-19138
CWE-434
Critical
PHP Numeric Errors Vulnerability (CVE-2007-1383)
CVE-2007-1383
-
Critical
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1903)
CVE-2016-1903
CWE-119
Critical
Oracle JRE CVE-2014-2421 Vulnerability (CVE-2014-2421)
CVE-2014-2421
-
Critical
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2023-35941)
CVE-2023-35941
CWE-116
Critical
SharePoint Improper Input Validation Vulnerability (CVE-2020-1025)
CVE-2020-1025
CWE-20
Critical
XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36217)
CVE-2023-36217
CWE-707
Critical
Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-19919)
CVE-2019-19919
CWE-138
Critical
PHP CVE-2007-0910 Vulnerability (CVE-2007-0910)
CVE-2007-0910
-
Critical
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-1939)
CVE-2011-1939
CWE-138
Critical
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-19846)
CVE-2019-19846
CWE-138
Critical
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2108)
CVE-2016-2108
CWE-119
Critical
Django Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-19844)
CVE-2019-19844
CWE-640
Critical
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2141)
CVE-2016-2141
CWE-264
Critical
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-44790)
CVE-2021-44790
CWE-787
Critical
Sqlite Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-19646)
CVE-2019-19646
CWE-754
Critical
Apache Traffic Server Improper Access Control Vulnerability (CVE-2014-3624)
CVE-2014-3624
CWE-284
Critical
Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-15153)
CVE-2020-15153
CWE-138
Critical
Oracle Application Server CVE-2008-1824 Vulnerability (CVE-2008-1824)
CVE-2008-1824
-
Critical
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2015-7501)
CVE-2015-7501
CWE-502
Critical