Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
Drupal Core 8.8.x Security Bypass (8.8.0 - 8.8.7)
CVE-2020-13665
CWE-264
High
Drupal Core 8.9.0 Cross-Site Request Forgery (8.9.0)
CVE-2020-13663
CWE-352
High
Drupal Core 8.9.0 Remote Code Execution (8.9.0)
CVE-2020-13664
CWE-94
High
Drupal Core 8.9.0 Security Bypass (8.9.0)
CVE-2020-13665
CWE-264
High
Drupal Core 8.9.x Information Disclosure (8.9.0 - 8.9.5)
CVE-2020-13670
CWE-200
High
Drupal Core 8.9.x Multiple Cross-Site Scripting Vulnerabilities (8.9.0 - 8.9.5)
CVE-2020-13688
CWE-79
High
Drupal Core 8.9.x Security Bypass (8.9.0 - 8.9.5)
CVE-2020-13667
CWE-264
High
Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.8)
CVE-2020-13671
CWE-434
High
Drupal Core 8.x.x Cross-Site Scripting (8.0.0 - 8.8.12)
CVE-2020-13672
CWE-79
High
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.13)
CVE-2022-29248
CWE-264
High
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.17)
CVE-2022-25273
CWE-20
High
Drupal Core 9.1.x Directory Traversal (9.1.0 - 9.1.10)
CVE-2021-32610
CWE-22
High
Drupal Core 9.1.x Multiple Security Bypass Vulnerabilities (9.1.0 - 9.1.12)
CVE-2020-13677
CWE-284
High
Drupal Core 9.2.x Cross-Site Request Forgery (9.2.0 - 9.2.5)
CVE-2020-13674
CWE-352
High
Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.10)
CVE-2021-41184
CWE-79
High
Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.3)
-
CWE-79
High
Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.8)
-
CWE-79
High
Drupal Core 9.2.x Directory Traversal (9.2.0 - 9.2.1)
CVE-2021-32610
CWE-22
High
Drupal Core 9.2.x Multiple Security Bypass Vulnerabilities (9.2.0 - 9.2.5)
CVE-2020-13677
CWE-284
High
Drupal Core 9.2.x Multiple Vulnerabilities (9.2.0 - 9.2.14)
CVE-2022-24729
CWE-400
High
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.20)
CVE-2022-31043
CWE-284
High
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.12)
CVE-2022-25270
CWE-264
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.13)
-
CWE-79
High
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.15)
CVE-2022-24775
CWE-20
High
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.19)
CVE-2022-29248
CWE-264
High
Drupal Core 9.3.x Cross-Site Scripting (9.3.0 - 9.3.18)
CVE-2022-25276
CWE-79
High
Drupal Core 9.3.x Cross-Site Scripting (9.3.0 - 9.3.2)
CVE-2021-41184
CWE-79
High
Drupal Core 9.3.x Multiple Vulnerabilities (9.3.0 - 9.3.7)
CVE-2022-24729
CWE-400
High
Drupal Core 9.3.x Remote Code Execution (9.3.0 - 9.3.18)
CVE-2022-25277
CWE-434
High
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.11)
CVE-2022-25274
CWE-264
High
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)
CVE-2022-25271
CWE-20
High
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.8)
CVE-2022-24775
CWE-20
High
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.18)
CVE-2022-25278
CWE-264
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.11)
-
CWE-79
High
Drupal Core 9.1.x Cross-Site Request Forgery (9.1.0 - 9.1.12)
CVE-2020-13674
CWE-352
High
Drupal Core 9.0.x Arbitrary File Overwrite (9.0.0 - 9.0.10)
CVE-2020-36193
CWE-73
High
Drupal Core 7.x Security Bypass (7.0 - 7.87)
CVE-2022-25271
CWE-20
High
Drupal Core 9.0.x Cross-Site Scripting (9.0.0 - 9.0.11)
CVE-2020-13672
CWE-79
High
Drupal Core 9.0.x Cross-Site Scripting (9.0.0 - 9.0.13)
CVE-2021-33829
CWE-79
High
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.7)
CVE-2020-13671
CWE-434
High
Drupal Core 9.0.x Remote Code Execution (9.0.0 - 9.0.8)
CVE-2020-28949
CWE-434
High
Drupal Core 9.1.x Arbitrary File Overwrite (9.1.0 - 9.1.2)
CVE-2020-36193
CWE-73
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.6)
CVE-2020-13672
CWE-79
High
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.8)
CVE-2021-33829
CWE-79
High
Drupal Core 7.x Directory Traversal (7.0 - 7.81)
CVE-2021-32610
CWE-22
High
Drupal Core 7.x Multiple Cross-Site Scripting Vulnerabilities (7.0 - 7.85)
CVE-2021-41184
CWE-79
High
Drupal Core 7.x Security Bypass (7.0 - 7.90)
CVE-2022-25275
CWE-264
High
Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18)
CVE-2020-13674
CWE-352
High
Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities (9.0.0 - 9.0.14)
CVE-2020-13677
CWE-284
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.19)
-
CWE-79
High
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.17)
-
CWE-79
High
Drupal Core 8.9.x Directory Traversal (8.9.0 - 8.9.16)
CVE-2021-32610
CWE-22
High
Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)
CVE-2020-13677
CWE-284
High
Drupal Core 8.x.x Cross-Site Request Forgery (8.0.0 - 8.8.12)
CVE-2020-13674
CWE-352
High
Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.8.12)
CVE-2021-32610
CWE-22
High
Drupal Core 8.x.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.8.12)
CVE-2020-13677
CWE-284
High
Drupal Core 9.0.x Cross-Site Request Forgery (9.0.0 - 9.0.14)
CVE-2020-13674
CWE-352
High
Drupal Core 9.0.x Cross-Site Scripting (9.0.0 - 9.0.14)
-
CWE-79
High
Drupal Core 9.0.x Directory Traversal (9.0.0 - 9.0.14)
CVE-2021-32610
CWE-22
High
PHP Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2002-0985)
CVE-2002-0985
CWE-707
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.8.7)
CVE-2023-7027
CWE-79
High
WordPress Plugin Survey Maker-Best WordPress Survey Cross-Site Scripting (3.1.3)
CVE-2023-0038
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.3)
CVE-2023-25993
CWE-862
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.65)
CVE-2021-25022
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.22.24)
-
CWE-352
High
WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.4.1)
CVE-2023-23714
CWE-352
High
WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.3)
-
CWE-352
High
WordPress Plugin Ultimate WP Query Search Filter Cross-Site Scripting (1.0.10)
CVE-2023-23832
CWE-79
High
Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111)
CVE-2006-4111
CWE-94
High
Ruby on Rails CVE-2006-4112 Vulnerability (CVE-2006-4112)
CVE-2006-4112
-
High
WordPress Plugin Twitch Player Cross-Site Scripting (2.1.0)
CVE-2023-25464
CWE-79
High
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)
CVE-2023-26008
CWE-284
High
WordPress Plugin TinyMCE Custom Styles Cross-Site Scripting (1.1.2)
CVE-2023-23995
CWE-79
High
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.68)
CVE-2021-25089
CWE-79
High
WordPress Plugin Tickera-WordPress Event Ticketing Security Bypass (3.4.9.1)
-
CWE-862
High