Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23500 vulnerabilities in this category.

Critical: 1518 High: 12619 Medium: 8575 Low: 784 Information: 4
Vulnerability Name
CVE
CWE
Severity
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-1000658)
CVE-2018-1000658
CWE-434
High
LimeSurvey Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000659)
CVE-2018-1000659
CWE-22
High
Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-8450)
CVE-2020-8450
CWE-119
High
WordPress Improper Input Validation Vulnerability (CVE-2018-1000773)
CVE-2018-1000773
CWE-20
High
Squid Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-8449)
CVE-2020-8449
CWE-668
High
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)
CVE-2008-3223
CWE-138
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8420)
CVE-2020-8420
CWE-352
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8419)
CVE-2020-8419
CWE-352
High
Joomla Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3227)
CVE-2008-3227
CWE-59
High
Joomla Configuration Vulnerability (CVE-2008-3228)
CVE-2008-3228
-
High
Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9840)
CVE-2017-9840
CWE-434
High
PHP Numeric Errors Vulnerability (CVE-2015-4022)
CVE-2015-4022
-
High
MODX Improper Certificate Validation Vulnerability (CVE-2017-7322)
CVE-2017-7322
CWE-295
High
Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5897)
CVE-2007-5897
CWE-119
High
Oracle Application Server CVE-2007-5524 Vulnerability (CVE-2007-5524)
CVE-2007-5524
-
High
Oracle Application Server CVE-2007-5525 Vulnerability (CVE-2007-5525)
CVE-2007-5525
-
High
Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5554)
CVE-2007-5554
CWE-200
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-7659)
CVE-2017-7659
CWE-476
High
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2017-7668)
CVE-2017-7668
CWE-125
High
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-7671)
CVE-2017-7671
CWE-20
High
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-7675)
CVE-2017-7675
CWE-22
High
phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5688)
CVE-2007-5688
CWE-138
High
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741)
CVE-2007-5741
CWE-94
High
PHP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2017-7963)
CVE-2017-7963
CWE-770
High
Oracle Application Server CVE-2007-5521 Vulnerability (CVE-2007-5521)
CVE-2007-5521
-
High
Oracle Database Server CVE-2015-4873 Vulnerability (CVE-2015-4873)
CVE-2015-4873
-
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-20187)
CVE-2021-20187
CWE-94
High
Drupal Improper Input Validation Vulnerability (CVE-2007-6299)
CVE-2007-6299
CWE-20
High
MySQL CVE-2015-4819 Vulnerability (CVE-2015-4819)
CVE-2015-4819
-
High
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8101)
CVE-2017-8101
CWE-352
High
Roundcube Improper Privilege Management Vulnerability (CVE-2017-8114)
CVE-2017-8114
CWE-269
High
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2007-6423)
CVE-2007-6423
-
High
TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-20114)
CVE-2021-20114
CWE-200
High
PostgreSQL Improper Authentication Vulnerability (CVE-2007-6601)
CVE-2007-6601
CWE-287
High
Oracle Application Server CVE-2007-5523 Vulnerability (CVE-2007-5523)
CVE-2007-5523
-
High
Oracle Database Server CVE-2007-5520 Vulnerability (CVE-2007-5520)
CVE-2007-5520
-
High
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6666)
CVE-2007-6666
CWE-138
High
Oracle Database Server Resource Management Errors Vulnerability (CVE-2007-5506)
CVE-2007-5506
-
High
MODX CVE-2017-7323 Vulnerability (CVE-2017-7323)
CVE-2017-7323
-
High
Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7415)
CVE-2017-7415
CWE-200
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7484)
CVE-2017-7484
CWE-200
High
Django Resource Management Errors Vulnerability (CVE-2015-5145)
CVE-2015-5145
-
High
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7486)
CVE-2017-7486
CWE-200
High
Django Resource Management Errors Vulnerability (CVE-2015-5143)
CVE-2015-5143
-
High
Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-7529)
CVE-2017-7529
CWE-190
High
PHP Other Vulnerability (CVE-2007-5424)
CVE-2007-5424
-
High
Oracle Database Server CVE-2007-5505 Vulnerability (CVE-2007-5505)
CVE-2007-5505
-
High
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)
CVE-2017-7536
CWE-470
High
Oracle Application Server CVE-2007-5520 Vulnerability (CVE-2007-5520)
CVE-2007-5520
-
High
PostgreSQL CVE-2017-7547 Vulnerability (CVE-2017-7547)
CVE-2017-7547
-
High
PostgreSQL CVE-2017-7548 Vulnerability (CVE-2017-7548)
CVE-2017-7548
-
High
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7561)
CVE-2017-7561
CWE-444
High
Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)
CVE-2007-5512
-
High
MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-7566)
CVE-2017-7566
CWE-918
High
Jetty CVE-2017-7656 Vulnerability (CVE-2017-7656)
CVE-2017-7656
-
High
Oracle Application Server CVE-2007-5516 Vulnerability (CVE-2007-5516)
CVE-2007-5516
-
High
Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)
CVE-2007-5517
-
High
Oracle Application Server CVE-2007-5518 Vulnerability (CVE-2007-5518)
CVE-2007-5518
-
High
Oracle Application Server CVE-2007-5519 Vulnerability (CVE-2007-5519)
CVE-2007-5519
-
High
Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-6619)
CVE-2007-6619
CWE-264
High
SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-8501)
CVE-2017-8501
CWE-119
High
Apache HTTP Server Use After Free Vulnerability (CVE-2017-9798)
CVE-2017-9798
CWE-416
High
PHP Other Vulnerability (CVE-2015-4644)
CVE-2015-4644
-
High
XOOPS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0612)
CVE-2008-0612
CWE-22
High
MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9069)
CVE-2017-9069
CWE-434
High
Microsoft SQL Server Elevation of Privilege Vulnerability (CVE-2021-1636)
CVE-2021-1636
-
High
Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-9757)
CVE-2020-9757
CWE-138
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4654)
CVE-2015-4654
CWE-138
High
PHP Out-of-bounds Read Vulnerability (CVE-2017-9118)
CVE-2017-9118
CWE-125
High
PHP NULL Pointer Dereference Vulnerability (CVE-2017-9229)
CVE-2017-9229
CWE-476
High
Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-9233)
CVE-2017-9233
CWE-611
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0719)
CVE-2008-0719
CWE-138
High
Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0795)
CVE-2008-0795
CWE-138
High
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491)
CVE-2008-0491
CWE-138
High
PHP Improper Input Validation Vulnerability (CVE-2015-4605)
CVE-2015-4605
CWE-20
High