Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP Improper Input Validation Vulnerability (CVE-2014-3480)
CVE-2014-3480
CWE-20
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3481)
CVE-2014-3481
CWE-200
Medium
PHP Improper Input Validation Vulnerability (CVE-2014-3487)
CVE-2014-3487
CWE-20
Medium
OpenSSL Other Vulnerability (CVE-2014-3505)
CVE-2014-3505
-
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2014-3506)
CVE-2014-3506
-
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2014-3507)
CVE-2014-3507
-
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3508)
CVE-2014-3508
CWE-200
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-3509)
CVE-2014-3509
CWE-362
Medium
OpenSSL Other Vulnerability (CVE-2014-3510)
CVE-2014-3510
-
Medium
OpenSSL CVE-2014-3511 Vulnerability (CVE-2014-3511)
CVE-2014-3511
-
Medium
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
CVE-2014-3518
CWE-94
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-3523)
CVE-2014-3523
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-3538)
CVE-2014-3538
-
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3542)
CVE-2014-3542
CWE-200
Medium
Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0473)
CVE-2014-0473
CWE-264
Medium
Oracle JRE CVE-2014-0464 Vulnerability (CVE-2014-0464)
CVE-2014-0464
-
Medium
Django Improper Input Validation Vulnerability (CVE-2014-3730)
CVE-2014-3730
CWE-20
Medium
PHP Numeric Errors Vulnerability (CVE-2013-7328)
CVE-2013-7328
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7076)
CVE-2013-7076
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7077)
CVE-2013-7077
CWE-707
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2013-7079)
CVE-2013-7079
CWE-20
Medium
TYPO3 CVE-2013-7080 Vulnerability (CVE-2013-7080)
CVE-2013-7080
-
Medium
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7081)
CVE-2013-7081
CWE-264
Medium
PHP Numeric Errors Vulnerability (CVE-2013-7226)
CVE-2013-7226
-
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233)
CVE-2013-7233
CWE-352
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7241)
CVE-2013-7241
CWE-707
Medium
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7242)
CVE-2013-7242
CWE-138
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7275)
CVE-2013-7275
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7288)
CVE-2013-7288
CWE-707
Medium
e107 Credentials Management Errors Vulnerability (CVE-2013-7305)
CVE-2013-7305
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2013-7327)
CVE-2013-7327
CWE-20
Medium
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7330)
CVE-2013-7330
CWE-264
Medium
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7073)
CVE-2013-7073
CWE-264
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7341)
CVE-2013-7341
CWE-707
Medium
ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344)
CVE-2013-7344
-
Medium
PHP CVE-2013-7345 Vulnerability (CVE-2013-7345)
CVE-2013-7345
-
Medium
b2evolution Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7352)
CVE-2013-7352
CWE-352
Medium
Python Data Processing Errors Vulnerability (CVE-2013-7440)
CVE-2013-7440
-
Medium
Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-7443)
CVE-2013-7443
CWE-119
Medium
Moodle Credentials Management Errors Vulnerability (CVE-2014-0008)
CVE-2014-0008
-
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0009)
CVE-2014-0009
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0010)
CVE-2014-0010
CWE-352
Medium
Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0013)
CVE-2014-0013
CWE-707
Medium
Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0014)
CVE-2014-0014
CWE-707
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2014-0033)
CVE-2014-0033
CWE-20
Medium
Jboss EAP Improper Input Validation Vulnerability (CVE-2014-0034)
CVE-2014-0034
CWE-20
Medium
TYPO3 Cryptographic Issues Vulnerability (CVE-2013-7075)
CVE-2013-7075
-
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7062)
CVE-2013-7062
CWE-707
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0060)
CVE-2014-0060
CWE-264
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2013-6449)
CVE-2013-6449
-
Medium
Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6267)
CVE-2013-6267
CWE-707
Medium
Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-6357)
CVE-2013-6357
CWE-352
Medium
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-6385)
CVE-2013-6385
CWE-94
Medium
Drupal Cryptographic Issues Vulnerability (CVE-2013-6386)
CVE-2013-6386
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6388)
CVE-2013-6388
CWE-707
Medium
Drupal Improper Input Validation Vulnerability (CVE-2013-6389)
CVE-2013-6389
CWE-20
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6403)
CVE-2013-6403
CWE-264
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-6414)
CVE-2013-6414
CWE-20
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6415)
CVE-2013-6415
CWE-707
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6416)
CVE-2013-6416
CWE-707
Medium
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6417)
CVE-2013-6417
CWE-264
Medium
Apache HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
CVE-2013-6438
-
Medium
Oracle HTTP Server CVE-2013-6438 Vulnerability (CVE-2013-6438)
CVE-2013-6438
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2013-6450)
CVE-2013-6450
-
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7061)
CVE-2013-7061
CWE-264
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6451)
CVE-2013-6451
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6452)
CVE-2013-6452
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6454)
CVE-2013-6454
CWE-707
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6455)
CVE-2013-6455
CWE-200
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6472)
CVE-2013-6472
CWE-200
Medium
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6495)
CVE-2013-6495
CWE-707
Medium
PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2013-6501)
CVE-2013-6501
CWE-138
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-6712)
CVE-2013-6712
CWE-119
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6780)
CVE-2013-6780
CWE-707
Medium
Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6787)
CVE-2013-6787
CWE-138
Medium