Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Artifactory Missing Authorization Vulnerability (CVE-2026-65922)
CVE-2026-65922
CWE-862
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6470)
CVE-2026-6470
CWE-862
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2026-6472)
CVE-2026-6472
CWE-862
Medium
PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474)
CVE-2026-6474
CWE-134
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65925)
CVE-2026-65925
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65924)
CVE-2026-65924
CWE-918
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65923)
CVE-2026-65923
CWE-918
Medium
Django Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-6873)
CVE-2026-6873
CWE-347
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-6907)
CVE-2026-6907
CWE-524
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-8595)
CVE-2026-8595
CWE-707
Medium
Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-62641)
CVE-2026-62641
CWE-770
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62829)
CVE-2026-62829
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-62826)
CVE-2026-62826
CWE-707
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71100)
CVE-2026-71100
CWE-284
Medium
Roundcube Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2026-62642)
CVE-2026-62642
CWE-835
Medium
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7259)
CVE-2026-7259
CWE-476
Medium
PHP Stack-based Buffer Overflow Vulnerability (CVE-2026-7260)
CVE-2026-7260
CWE-121
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-8063)
CVE-2026-8063
CWE-476
Medium
SharePoint Insufficiently Protected Credentials Vulnerability (CVE-2026-62839)
CVE-2026-62839
CWE-522
Medium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-8199)
CVE-2026-8199
CWE-1325
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-8200)
CVE-2026-8200
CWE-532
Medium
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-8202)
CVE-2026-8202
CWE-770
Medium
MongoDb Use After Free Vulnerability (CVE-2026-8336)
CVE-2026-8336
CWE-416
Medium
Jetty Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-8384)
CVE-2026-8384
CWE-647
Medium
Django Improper Handling of Case Sensitivity Vulnerability (CVE-2026-8404)
CVE-2026-8404
CWE-178
Medium
SharePoint Relative Path Traversal Vulnerability (CVE-2026-62837)
CVE-2026-62837
CWE-23
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-62917)
CVE-2026-62917
CWE-20
Medium
Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100)
CVE-2026-65100
CWE-696
Medium
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-64649)
CVE-2026-64649
CWE-918
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64922)
CVE-2026-64922
CWE-707
Medium
MongoDb Improper Validation of Specified Quantity in Input Vulnerability (CVE-2026-6915)
CVE-2026-6915
CWE-1284
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64916)
CVE-2026-64916
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64902)
CVE-2026-64902
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64900)
CVE-2026-64900
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64897)
CVE-2026-64897
CWE-707
Medium
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648)
CVE-2026-64648
CWE-524
Medium
SharePoint Incorrect Authorization Vulnerability (CVE-2026-63512)
CVE-2026-63512
CWE-863
Medium
Next.js Improper Encoding or Escaping of Output Vulnerability (CVE-2026-64647)
CVE-2026-64647
CWE-116
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646)
CVE-2026-64646
CWE-770
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-64645)
CVE-2026-64645
CWE-601
Medium
Next.js Inefficient Algorithmic Complexity Vulnerability (CVE-2026-64644)
CVE-2026-64644
CWE-407
Medium
Next.js Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-64643)
CVE-2026-64643
CWE-201
Medium
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63516)
CVE-2026-63516
CWE-502
Medium
Jenkins Missing Authorization Vulnerability (CVE-2026-53439)
CVE-2026-53439
CWE-862
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53437)
CVE-2026-53437
CWE-601
Medium
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-33658)
CVE-2026-33658
CWE-770
Medium
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-42771)
CVE-2026-42771
CWE-125
Medium
Serendipity Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2026-39963)
CVE-2026-39963
CWE-565
Medium
Opencart Incomplete Filtering of Special Elements Vulnerability (CVE-2026-3714)
CVE-2026-3714
CWE-791
Medium
XWikiplatform Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-40105)
CVE-2026-40105
CWE-707
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-40175)
CVE-2026-40175
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-41240)
CVE-2026-41240
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423)
CVE-2026-41423
CWE-918
Medium
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-42034)
CVE-2026-42034
CWE-770
Medium
axios Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-42036)
CVE-2026-42036
CWE-770
Medium
axios Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2026-42037)
CVE-2026-42037
CWE-707
Medium
axios Improper Authentication Vulnerability (CVE-2026-42041)
CVE-2026-42041
CWE-287
Medium
axios Permissive List of Allowed Inputs Vulnerability (CVE-2026-42042)
CVE-2026-42042
CWE-183
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42766)
CVE-2026-42766
CWE-476
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42767)
CVE-2026-42767
CWE-476
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2026-42769)
CVE-2026-42769
CWE-295
Medium
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-43951)
CVE-2026-43951
CWE-125
Medium
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35544)
CVE-2026-35544
CWE-669
Medium
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45446)
CVE-2026-45446
CWE-325
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45465)
CVE-2026-45465
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45464)
CVE-2026-45464
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45462)
CVE-2026-45462
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45453)
CVE-2026-45453
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-44821)
CVE-2026-44821
CWE-125
Medium
Apache HTTP Server Improper Privilege Management Vulnerability (CVE-2026-44119)
CVE-2026-44119
CWE-269
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44581)
CVE-2026-44581
CWE-707
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580)
CVE-2026-44580
CWE-707
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577)
CVE-2026-44577
CWE-770
Medium