Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin PowerPack Pro for Elementor Privilege Escalation (2.10.14)
CVE-2024-39634
CWE-269
High
WordPress Plugin Redux Framework Cross-Site Scripting (4.4.17)
CVE-2024-6828
CWE-79
High
Drupal Core 4.6.x Form Action Attribute Injection (4.6.0 - 4.6.9)
CVE-2006-5477
CWE-20
High
MediaWiki remote code execution
CVE-2014-1610
CWE-20
High
Adobe Coldfusion 8 multiple linked XSS vulnerabilies
CVE-2009-1872
CWE-79
High
Plone arbitrary code execution
CVE-2011-3587
CWE-78
High
WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Security Bypass (4.9.3)
CVE-2024-7027
CWE-863
High
ColdFusion User-Agent cross-site scripting
CVE-2007-0817
CWE-79
High
Microsoft IIS5 NTLM and Basic authentication bypass
CVE-2007-2815
CWE-288
High
Vulnerable project dependencies
-
CWE-1395
High
WordPress plugin Custom Contact Forms critical vulnerability
-
CWE-287
High
Horde remote code execution
CVE-2014-1691
CWE-94
High
Jetpack 2.9.3: Critical Security Update
CVE-2014-0173
CWE-287
High
Magento Cacheleak
-
CWE-200
High
WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Security Bypass (5.3.14)
CVE-2024-6750
CWE-862
High
Adminer 4.6.2 file disclosure vulnerability
-
CWE-22
High
VirtueMart access control bypass
-
CWE-287
High
WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)
CVE-2024-6753
CWE-79
High
WEBrick v.1.3 directory traversal
CVE-2008-1145
CWE-22
High
Invision Power Board version 3.3.4 unserialize PHP code execution
CVE-2012-5692
CWE-20
High
IBM Lotus Domino web server Cross-Site Scripting vulnerabilities
CVE-2012-3302
CWE-79
High
ColdFusion 8 FCKEditor file upload vulnerability
CVE-2009-2265
CWE-22
High
ColdFusion 9 solr service exposed
CVE-2010-0185
CWE-306
High
VMware directory traversal and privilege escalation vulnerabilities
CVE-2009-3733
CWE-22
High
Liferay version older than 7.0
-
CWE-502
High
WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Arbitrary File Upload (5.3.14)
CVE-2024-6756
CWE-434
High
Drupal Core 4.6.x Denial of Service (4.6.0 - 4.6.10)
CVE-2007-0124
CWE-400
High
Drupal Core 4.6.x Mail Header Injection (4.6.0 - 4.6.5)
-
CWE-20
High
Drupal Core 5.x SQL Injection (5.0 - 5.3)
CVE-2007-6299
CWE-89
High
Drupal Core 5.x Multiple Cross-Site Request Forgery Vulnerabilities (5.0 - 5.1)
CVE-2007-4063
CWE-352
High
Drupal Core 5.x Cross-Site Request Forgery (5.0 - 5.2)
CVE-2007-5594
CWE-352
High
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.5)
CVE-2008-0273
CWE-79
High
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.2)
CVE-2007-5596
CWE-79
High
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.16)
CVE-2009-1844
CWE-79
High
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.17)
CVE-2009-1844
CWE-79
High
Drupal Core 5.x Cross-Site Scripting (5.0 - 5.20)
CVE-2009-4369
CWE-79
High
Drupal Core 5.x HTTP Response Splitting (5.0 - 5.2)
CVE-2007-5595
CWE-113
High
Drupal Core 5.x Information Disclosure (5.0 - 5.18)
CVE-2009-2374
CWE-200
High
Drupal Core 5.x Local File Inclusion (5.0 - 5.15)
-
CWE-22
High
Drupal Core 5.x Local File Inclusion (5.0 - 5.11)
CVE-2008-6171
CWE-22
High
Drupal Core 5.x Multiple Cross-Site Scripting Vulnerabilities (5.0 - 5.1)
CVE-2007-4064
CWE-79
High
Drupal Core 5.x Arbitrary Code Execution (5.0)
CVE-2007-0626
CWE-95
High
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.22)
CVE-2010-3093
CWE-264
High
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.10)
CVE-2008-4793
CWE-264
High
Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.7)
CVE-2008-3222
CWE-384
High
Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.12)
CVE-2008-6533
CWE-352
High
Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.9)
CVE-2008-3744
CWE-434
High
Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.21)
-
CWE-601
High
Drupal Core 5.x Security Bypass (5.0 - 5.2)
CVE-2007-5597
CWE-702
High
Drupal Core 5.x Session Fixation (5.0 - 5.19)
-
CWE-384
High
Drupal Core 5.x Session Fixation (5.0 - 5.8)
-
CWE-384
High
Drupal Core 5.x SQL Injection (5.0 - 5.14)
-
CWE-89
High
Drupal Core 5.x Cross-Site Request Forgery (5.0 - 5.5)
CVE-2008-0272
CWE-352
High
Drupal Core 5.x Arbitrary Code Execution (5.0 - 5.2)
CVE-2007-5593
CWE-95
High
Drupal Core 4.6.x Multiple Cross-Site Scripting Vulnerabilities (4.6.0 - 4.6.9)
CVE-2006-5475
CWE-79
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.10)
CVE-2008-0274
CWE-79
High
Drupal Core 4.6.x Multiple Vulnerabilities (4.6.0 - 4.6.3)
-
CWE-113
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.3)
CVE-2005-3974
CWE-264
High
Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.5)
-
CWE-264
High
Drupal Core 4.6.x Session Fixation (4.6.0 - 4.6.5)
-
CWE-384
High
Drupal Core 4.6.x SQL Injection (4.6.0 - 4.6.6)
CVE-2006-2742
CWE-89
High
Drupal Core 4.7.x Arbitrary Code Execution (4.7.0 - 4.7.5)
CVE-2007-0626
CWE-95
High
Drupal Core 4.7.x Arbitrary Code Execution (4.7.0)
CVE-2006-2743
CWE-95
High
Drupal Core 4.7.x Cross-Site Request Forgery (4.7.0 - 4.7.10)
CVE-2008-0272
CWE-352
High
Drupal Core 4.7.x Cross-Site Request Forgery (4.7.0 - 4.7.3)
CVE-2006-5476
CWE-352
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.7)
CVE-2007-5596
CWE-79
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.4)
CVE-2007-0136
CWE-79
High
Drupal Core 4.7.x SQL Injection (4.7.0 - 4.7.8)
CVE-2007-6299
CWE-89
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.1)
CVE-2006-2833
CWE-79
High
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.2)
CVE-2006-4002
CWE-79
High
Drupal Core 4.7.x Denial of Service (4.7.0 - 4.7.4)
CVE-2007-0124
CWE-400
High
Drupal Core 4.7.x Form Action Attribute Injection (4.7.0 - 4.7.3)
CVE-2006-5477
CWE-20
High
Drupal Core 4.7.x HTTP Response Splitting (4.7.0 - 4.7.7)
CVE-2007-5595
CWE-113
High
Drupal Core 4.7.x Multiple Cross-Site Scripting Vulnerabilities (4.7.0 - 4.7.3)
CVE-2006-5475
CWE-79
High
Drupal Core 4.7.x Multiple Cross-Site Scripting Vulnerabilities (4.7.0 - 4.7.6)
CVE-2007-4064
CWE-79
High