Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23101 vulnerabilities in this category.

Critical: 1474 High: 12458 Medium: 8395 Low: 770 Information: 4
Vulnerability Name
CVE
CWE
Severity
silverstripeCMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6789)
CVE-2013-6789
CWE-200
Medium
Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6872)
CVE-2013-6872
CWE-138
Medium
Python Cryptographic Issues Vulnerability (CVE-2013-7040)
CVE-2013-7040
-
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-7060)
CVE-2013-7060
CWE-200
Medium
Jboss EAP Cryptographic Issues Vulnerability (CVE-2014-0035)
CVE-2014-0035
-
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0061)
CVE-2014-0061
CWE-264
Medium
Oracle JRE CVE-2014-0463 Vulnerability (CVE-2014-0463)
CVE-2014-0463
-
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-0231)
CVE-2014-0231
-
Medium
OpenSSL Other Vulnerability (CVE-2014-0198)
CVE-2014-0198
-
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0207)
CVE-2014-0207
CWE-119
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0213)
CVE-2014-0213
CWE-352
Medium
Moodle Improper Authentication Vulnerability (CVE-2014-0214)
CVE-2014-0214
CWE-287
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0215)
CVE-2014-0215
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0216)
CVE-2014-0216
CWE-264
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0217)
CVE-2014-0217
CWE-200
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0218)
CVE-2014-0218
CWE-707
Medium
OpenSSL Resource Management Errors Vulnerability (CVE-2014-0221)
CVE-2014-0221
-
Medium
Apache HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Oracle HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)
CVE-2014-0226
CWE-362
Medium
Apache Tomcat Data Processing Errors Vulnerability (CVE-2014-0227)
CVE-2014-0227
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-0237)
CVE-2014-0237
-
Medium
Jboss EAP Incorrect Authorization Vulnerability (CVE-2014-0169)
CVE-2014-0169
CWE-863
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0238)
CVE-2014-0238
CWE-119
Medium
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0248)
CVE-2014-0248
CWE-94
Medium
Oracle Database Server CVE-2014-0377 Vulnerability (CVE-2014-0377)
CVE-2014-0377
-
Medium
Oracle Database Server CVE-2014-0378 Vulnerability (CVE-2014-0378)
CVE-2014-0378
-
Medium
MySQL CVE-2014-0384 Vulnerability (CVE-2014-0384)
CVE-2014-0384
-
Medium
MySQL CVE-2014-0386 Vulnerability (CVE-2014-0386)
CVE-2014-0386
-
Medium
MySQL CVE-2014-0401 Vulnerability (CVE-2014-0401)
CVE-2014-0401
-
Medium
MySQL CVE-2014-0402 Vulnerability (CVE-2014-0402)
CVE-2014-0402
-
Medium
MySQL CVE-2014-0412 Vulnerability (CVE-2014-0412)
CVE-2014-0412
-
Medium
MySQL CVE-2014-0433 Vulnerability (CVE-2014-0433)
CVE-2014-0433
-
Medium
Oracle JRE CVE-2014-0449 Vulnerability (CVE-2014-0449)
CVE-2014-0449
-
Medium
Oracle JRE CVE-2014-0453 Vulnerability (CVE-2014-0453)
CVE-2014-0453
-
Medium
Oracle JRE CVE-2014-0459 Vulnerability (CVE-2014-0459)
CVE-2014-0459
-
Medium
Oracle JRE CVE-2014-0460 Vulnerability (CVE-2014-0460)
CVE-2014-0460
-
Medium
OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0195)
CVE-2014-0195
CWE-119
Medium
Jolokia Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0168)
CVE-2014-0168
CWE-352
Medium
PostgreSQL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0062)
CVE-2014-0062
CWE-362
Medium
Apache HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0063)
CVE-2014-0063
CWE-119
Medium
PostgreSQL Numeric Errors Vulnerability (CVE-2014-0064)
CVE-2014-0064
-
Medium
PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0065)
CVE-2014-0065
CWE-119
Medium
PostgreSQL Improper Input Validation Vulnerability (CVE-2014-0066)
CVE-2014-0066
CWE-20
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0067)
CVE-2014-0067
CWE-264
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0075)
CVE-2014-0075
-
Medium
Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-0080)
CVE-2014-0080
CWE-138
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0081)
CVE-2014-0081
CWE-707
Medium
Ruby on Rails Improper Input Validation Vulnerability (CVE-2014-0082)
CVE-2014-0082
CWE-20
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0093)
CVE-2014-0093
CWE-264
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2014-0095)
CVE-2014-0095
CWE-20
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0096)
CVE-2014-0096
CWE-264
Medium
Oracle HTTP Server CVE-2014-0098 Vulnerability (CVE-2014-0098)
CVE-2014-0098
-
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0099)
CVE-2014-0099
-
Medium
WordPress Improper Authentication Vulnerability (CVE-2014-0166)
CVE-2014-0166
CWE-287
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2014-0117)
CVE-2014-0117
CWE-20
Medium
Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)
CVE-2014-0118
CWE-400
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)
CVE-2014-0118
CWE-400
Medium
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0119)
CVE-2014-0119
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0122)
CVE-2014-0122
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0123)
CVE-2014-0123
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0124)
CVE-2014-0124
CWE-264
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0125)
CVE-2014-0125
CWE-264
Medium
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0126)
CVE-2014-0126
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0127)
CVE-2014-0127
CWE-264
Medium
Squid Improper Input Validation Vulnerability (CVE-2014-0128)
CVE-2014-0128
CWE-20
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0129)
CVE-2014-0129
CWE-264
Medium
Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-0130)
CVE-2014-0130
CWE-22
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0165)
CVE-2014-0165
CWE-264
Medium
PHP Improper Input Validation Vulnerability (CVE-2014-3710)
CVE-2014-3710
CWE-20
Medium
Dotclear Improper Authentication Vulnerability (CVE-2014-3781)
CVE-2014-3781
CWE-287
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6044)
CVE-2013-6044
CWE-707
Medium
WordPress Improper Input Validation Vulnerability (CVE-2014-9038)
CVE-2014-9038
CWE-20
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)
CVE-2014-8958
CWE-707
Medium