Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
ownCloud Other Vulnerability (CVE-2015-6670)
CVE-2015-6670
-
Medium
Oracle JRE CVE-2026-21933 Vulnerability (CVE-2026-21933)
CVE-2026-21933
-
Medium
Opencart Incomplete Filtering of Special Elements Vulnerability (CVE-2026-3714)
CVE-2026-3714
CWE-791
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-6711)
CVE-2025-6711
CWE-532
Medium
MongoDb Uncontrolled Resource Consumption Vulnerability (CVE-2025-6712)
CVE-2025-6712
CWE-400
Medium
MongoDb Improper Authorization Vulnerability (CVE-2025-6713)
CVE-2025-6713
CWE-285
Medium
Oracle JRE CVE-2026-21925 Vulnerability (CVE-2026-21925)
CVE-2026-21925
-
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-21860)
CVE-2026-21860
CWE-67
Medium
Grafana Improper Authorization Vulnerability (CVE-2026-21724)
CVE-2026-21724
CWE-285
Medium
Podcast Generator Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-70336)
CVE-2025-70336
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-0540)
CVE-2026-0540
CWE-707
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-70811)
CVE-2025-70811
CWE-352
Medium
MongoDb Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2025-7259)
CVE-2025-7259
CWE-843
Medium
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-21722)
CVE-2026-21722
CWE-200
Medium
Serendipity Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2026-39963)
CVE-2026-39963
CWE-565
Medium
TYPO3 Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-7900)
CVE-2025-7900
CWE-639
Medium
markdown-it Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-7969)
CVE-2025-7969
CWE-707
Medium
Dolibarr Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio Vulnerability (CVE-2026-34036)
CVE-2026-34036
-
Medium
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-39865)
CVE-2026-39865
CWE-400
Medium
Pega Infinity Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-9559)
CVE-2025-9559
CWE-639
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-25492)
CVE-2026-25492
CWE-918
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-25493)
CVE-2026-25493
CWE-918
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62259)
CVE-2025-62259
CWE-863
Medium
EspoCRM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-33657)
CVE-2026-33657
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62255)
CVE-2025-62255
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62255)
CVE-2025-62255
CWE-707
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-62256)
CVE-2025-62256
CWE-862
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-62256)
CVE-2025-62256
CWE-862
Medium
Liferay Portal Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62257)
CVE-2025-62257
CWE-307
Medium
Liferay DXP Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62257)
CVE-2025-62257
CWE-307
Medium
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62258)
CVE-2025-62258
CWE-352
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62259)
CVE-2025-62259
CWE-863
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-33515)
CVE-2026-33515
CWE-125
Medium
Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
Liferay DXP Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
Liferay DXP Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Liferay Portal Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264)
CVE-2025-62264
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264)
CVE-2025-62264
CWE-707
Medium
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-33534)
CVE-2026-33534
CWE-918
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
CVE-2025-62253
CWE-601
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62265)
CVE-2025-62265
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62248)
CVE-2025-62248
CWE-707
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62245)
CVE-2025-62245
CWE-352
Medium
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62245)
CVE-2025-62245
CWE-352
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246)
CVE-2025-62246
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246)
CVE-2025-62246
CWE-707
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-62247)
CVE-2025-62247
CWE-862
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-62247)
CVE-2025-62247
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62248)
CVE-2025-62248
CWE-707
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
CVE-2025-62253
CWE-601
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249)
CVE-2025-62249
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249)
CVE-2025-62249
CWE-707
Medium
Liferay DXP Origin Validation Error Vulnerability (CVE-2025-62250)
CVE-2025-62250
CWE-346
Medium
Liferay Portal Origin Validation Error Vulnerability (CVE-2025-62250)
CVE-2025-62250
CWE-346
Medium
Liferay DXP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-62251)
CVE-2025-62251
CWE-732
Medium
Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-62251)
CVE-2025-62251
CWE-732
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252)
CVE-2025-62252
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252)
CVE-2025-62252
CWE-639
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62265)
CVE-2025-62265
CWE-707
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62266)
CVE-2025-62266
CWE-601
Medium
Masa CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-66492)
CVE-2025-66492
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2025-65082)
CVE-2025-65082
CWE-150
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63082)
CVE-2025-63082
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63083)
CVE-2025-63083
CWE-707
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63238)
CVE-2025-63238
CWE-707
Medium
CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63419)
CVE-2025-63419
CWE-707
Medium
CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-63420)
CVE-2025-63420
CWE-707
Medium
PrestaShop Observable Timing Discrepancy Vulnerability (CVE-2026-25597)
CVE-2026-25597
CWE-208
Medium
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-64527)
CVE-2025-64527
CWE-476
Medium