Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23500 vulnerabilities in this category.

Critical: 1518 High: 12619 Medium: 8575 Low: 784 Information: 4
Vulnerability Name
CVE
CWE
Severity
Nginx Improper Encoding or Escaping of Output Vulnerability (CVE-2013-4547)
CVE-2013-4547
CWE-116
High
Oracle JRE CVE-2012-5084 Vulnerability (CVE-2012-5084)
CVE-2012-5084
-
High
Oracle JRE CVE-2020-14583 Vulnerability (CVE-2020-14583)
CVE-2020-14583
-
High
Oracle JRE CVE-2012-5089 Vulnerability (CVE-2012-5089)
CVE-2012-5089
-
High
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5159)
CVE-2012-5159
CWE-94
High
Lighttpd Inadequate Encryption Strength Vulnerability (CVE-2013-4508)
CVE-2013-4508
CWE-326
High
Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-5195)
CVE-2012-5195
CWE-119
High
WordPress Improper Input Validation Vulnerability (CVE-2013-4339)
CVE-2013-4339
CWE-20
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2019-3823)
CVE-2019-3823
CWE-125
High
Atlassian Jira CVE-2020-14167 Vulnerability (CVE-2020-14167)
CVE-2020-14167
-
High
Oracle Database Server CVE-2019-2799 Vulnerability (CVE-2019-2799)
CVE-2019-2799
-
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-13934)
CVE-2020-13934
CWE-119
High
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6338)
CVE-2019-6338
CWE-502
High
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6340)
CVE-2019-6340
CWE-502
High
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-13950)
CVE-2020-13950
CWE-476
High
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)
CVE-2012-6707
CWE-326
High
W3 Total Cache CVE-2019-6715 Vulnerability (CVE-2019-6715)
CVE-2019-6715
-
High
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-6970)
CVE-2019-6970
CWE-918
High
PleskLin Other Vulnerability (CVE-2013-0133)
CVE-2013-0133
-
High
PleskWin Other Vulnerability (CVE-2013-0133)
CVE-2013-0133
-
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2020-13935)
CVE-2020-13935
CWE-835
High
PHP Address Book Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0135)
CVE-2013-0135
CWE-138
High
Vanilla Forums Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3527)
CVE-2013-3527
CWE-138
High
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975)
CVE-2019-6975
CWE-770
High
Sqlite Use After Free Vulnerability (CVE-2020-13871)
CVE-2020-13871
CWE-416
High
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-0156)
CVE-2013-0156
CWE-20
High
PHP Out-of-bounds Write Vulnerability (CVE-2019-6977)
CVE-2019-6977
CWE-787
High
Joomla Improper Preservation of Permissions Vulnerability (CVE-2020-13763)
CVE-2020-13763
CWE-281
High
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)
CVE-2020-13760
CWE-352
High
PHP Address Book Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2778)
CVE-2013-2778
CWE-352
High
Drupal Improper Access Control Vulnerability (CVE-2020-13677)
CVE-2020-13677
CWE-284
High
WebERP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-7755)
CVE-2019-7755
CWE-138
High
Magento Session Fixation Vulnerability (CVE-2019-7849)
CVE-2019-7849
CWE-384
High
ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643)
CVE-2012-6643
CWE-138
High
Vanilla Forums CVE-2013-3528 Vulnerability (CVE-2013-3528)
CVE-2013-3528
-
High
Moodle Improper Privilege Management Vulnerability (CVE-2019-3849)
CVE-2019-3849
CWE-269
High
Oracle Database Server CVE-2013-3771 Vulnerability (CVE-2013-3771)
CVE-2013-3771
-
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5909)
CVE-2012-5909
CWE-138
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
CVE-2019-3894
CWE-264
High
NuSOAP Improper Certificate Validation Vulnerability (CVE-2012-6071)
CVE-2012-6071
CWE-295
High
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)
CVE-2019-4036
CWE-20
High
Squid NULL Pointer Dereference Vulnerability (CVE-2020-14058)
CVE-2020-14058
CWE-476
High
IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)
CVE-2019-4135
-
High
IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)
CVE-2019-4145
-
High
Oracle Database Server CVE-2013-3774 Vulnerability (CVE-2013-3774)
CVE-2013-3774
-
High
IBM RTC Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-4252)
CVE-2019-4252
CWE-22
High
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707)
CVE-2019-4707
CWE-611
High
Nexus Repository Manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-5475)
CVE-2019-5475
CWE-138
High
Perl Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-6329)
CVE-2012-6329
CWE-94
High
Oracle Database Server CVE-2013-3760 Vulnerability (CVE-2013-3760)
CVE-2013-3760
-
High
Python NULL Pointer Dereference Vulnerability (CVE-2019-5010)
CVE-2019-5010
CWE-476
High
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6496)
CVE-2012-6496
CWE-138
High
Sqlite Use After Free Vulnerability (CVE-2019-5018)
CVE-2019-5018
CWE-416
High
Ruby on Rails CVE-2019-5418 Vulnerability (CVE-2019-5418)
CVE-2019-5418
-
High
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419)
CVE-2019-5419
CWE-770
High
Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3638)
CVE-2013-3638
CWE-138
High
ReviveAdserver Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2019-5440)
CVE-2019-5440
CWE-338
High
Oracle HTTP Server Uncontrolled Search Path Element Vulnerability (CVE-2019-5443)
CVE-2019-5443
CWE-427
High
MySQL CVE-2019-2800 Vulnerability (CVE-2019-2800)
CVE-2019-2800
-
High
WebLogic CVE-2020-14639 Vulnerability (CVE-2020-14639)
CVE-2020-14639
-
High
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7854)
CVE-2019-7854
CWE-639
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25496)
CVE-2019-25496
CWE-138
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25450)
CVE-2019-25450
CWE-138
High
Python Uncontrolled Search Path Element Vulnerability (CVE-2020-15523)
CVE-2020-15523
CWE-427
High
PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2311)
CVE-2012-2311
CWE-138
High
JBoss Application Server Improper Privilege Management Vulnerability (CVE-2012-2312)
CVE-2012-2312
CWE-269
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2324)
CVE-2012-2324
CWE-138
High
MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2325)
CVE-2012-2325
CWE-138
High
XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15252)
CVE-2020-15252
CWE-138
High
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25452)
CVE-2019-25452
CWE-138
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25495)
CVE-2019-25495
CWE-138
High
osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25497)
CVE-2019-25497
CWE-138
High
Python Improper Input Validation Vulnerability (CVE-2013-7338)
CVE-2013-7338
CWE-20
High
Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2332)
CVE-2012-2332
CWE-138
High
qdPM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-25669)
CVE-2019-25669
CWE-138
High