Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Next.js Interpretation Conflict Vulnerability (CVE-2026-44576)
CVE-2026-44576
CWE-436
Medium
Next.js Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2026-44572)
CVE-2026-44572
CWE-349
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-44489)
CVE-2026-44489
CWE-707
Medium
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-39865)
CVE-2026-39865
CWE-400
Medium
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35543)
CVE-2026-35543
CWE-669
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45481)
CVE-2026-45481
CWE-707
Medium
Handlebars Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33916)
CVE-2026-33916
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-34161)
CVE-2026-34161
CWE-707
Medium
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2026-34095)
CVE-2026-34095
CWE-668
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34093)
CVE-2026-34093
CWE-200
Medium
Dolibarr Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio Vulnerability (CVE-2026-34036)
CVE-2026-34036
-
Medium
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-34032)
CVE-2026-34032
CWE-125
Medium
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-33930)
CVE-2026-33930
CWE-121
Medium
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-33857)
CVE-2026-33857
CWE-125
Medium
WebLogic Improper Authorization Vulnerability (CVE-2026-34315)
CVE-2026-34315
CWE-285
Medium
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33740)
CVE-2026-33740
CWE-639
Medium
Chamilo Improper Restriction of XML External Entity Reference Vulnerability (CVE-2026-33737)
CVE-2026-33737
CWE-611
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58037)
CVE-2026-58037
CWE-707
Medium
Chamilo Insertion of Sensitive Information into Externally-Accessible File or Directory Vulnerability (CVE-2026-33705)
CVE-2026-33705
CWE-538
Medium
PrestaShop Improper Use of Validation Framework Vulnerability (CVE-2026-33674)
CVE-2026-33674
CWE-1173
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-33673)
CVE-2026-33673
CWE-707
Medium
SharePoint CVE-2022-41060 Vulnerability (CVE-2022-41060)
CVE-2022-41060
-
Medium
MySQL Improper Resource Shutdown or Release Vulnerability (CVE-2026-34317)
CVE-2026-34317
CWE-404
Medium
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35542)
CVE-2026-35542
CWE-669
Medium
Django Use of Persistent Cookies Containing Sensitive Information Vulnerability (CVE-2026-35192)
CVE-2026-35192
CWE-539
Medium
Roundcube Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2026-35541)
CVE-2026-35541
CWE-843
Medium
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35540)
CVE-2026-35540
CWE-669
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-35539)
CVE-2026-35539
CWE-707
Medium
Tornado Improper Handling of Invalid Use of Special Elements Vulnerability (CVE-2026-35536)
CVE-2026-35536
CWE-159
Medium
WebLogic Improper Privilege Management Vulnerability (CVE-2026-35291)
CVE-2026-35291
CWE-269
Medium
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-35220)
CVE-2026-35220
CWE-352
Medium
OpenSSL Double Free Vulnerability (CVE-2026-35188)
CVE-2026-35188
CWE-415
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34318)
CVE-2026-34318
CWE-200
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-34974)
CVE-2026-34974
CWE-707
Medium
phpMyFAQ Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-34973)
CVE-2026-34973
CWE-138
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-34729)
CVE-2026-34729
CWE-707
Medium
Apache Tomcat Improper Authentication Vulnerability (CVE-2026-34500)
CVE-2026-34500
CWE-287
Medium
Chamilo Improper Authorization Vulnerability (CVE-2026-34370)
CVE-2026-34370
CWE-285
Medium
MySQL Observable Response Discrepancy Vulnerability (CVE-2026-34319)
CVE-2026-34319
CWE-204
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45479)
CVE-2026-45479
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45483)
CVE-2026-45483
CWE-707
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53436)
CVE-2026-53436
CWE-601
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48949)
CVE-2026-48949
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48950)
CVE-2026-48950
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48951)
CVE-2026-48951
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48952)
CVE-2026-48952
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48953)
CVE-2026-48953
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48954)
CVE-2026-48954
CWE-707
Medium
Joomla CVE-2026-48955 Vulnerability (CVE-2026-48955)
CVE-2026-48955
-
Medium
Joomla CVE-2026-48956 Vulnerability (CVE-2026-48956)
CVE-2026-48956
-
Medium
markdown-it Uncontrolled Resource Consumption Vulnerability (CVE-2026-48988)
CVE-2026-48988
CWE-400
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49458)
CVE-2026-49458
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49459)
CVE-2026-49459
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49978)
CVE-2026-49978
CWE-707
Medium
MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147)
CVE-2026-4147
CWE-908
Medium
Python Improper Preservation of Permissions Vulnerability (CVE-2026-4360)
CVE-2026-4360
CWE-281
Medium
Squid Improper Input Validation Vulnerability (CVE-2026-50012)
CVE-2026-50012
CWE-20
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48905)
CVE-2026-48905
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50740)
CVE-2026-50740
CWE-707
Medium
Caddy Web Server Improper Encoding or Escaping of Output Vulnerability (CVE-2026-52846)
CVE-2026-52846
CWE-116
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-52725)
CVE-2026-52725
CWE-707
Medium
Sqlite Use After Free Vulnerability (CVE-2026-51298)
CVE-2026-51298
CWE-416
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50745)
CVE-2026-50745
CWE-707
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50744)
CVE-2026-50744
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50742)
CVE-2026-50742
CWE-707
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50739)
CVE-2026-50739
CWE-284
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
CVE-2026-50169
CWE-200
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555)
CVE-2026-50555
CWE-707
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)
CVE-2026-50184
CWE-200
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Joomla Improper Access Control Vulnerability (CVE-2026-48947)
CVE-2026-48947
CWE-284
Medium