Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48903)
CVE-2026-48903
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47060)
CVE-2026-47060
CWE-284
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47636)
CVE-2026-47636
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47634)
CVE-2026-47634
CWE-707
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47207)
CVE-2026-47207
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47205)
CVE-2026-47205
CWE-416
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47061)
CVE-2026-47061
CWE-284
Medium
Oracle Database Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-47045)
CVE-2026-47045
CWE-601
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47639)
CVE-2026-47639
CWE-707
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47039)
CVE-2026-47039
CWE-284
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47027)
CVE-2026-47027
CWE-284
Medium
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47021)
CVE-2026-47021
CWE-400
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-46975)
CVE-2026-46975
CWE-284
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46968)
CVE-2026-46968
CWE-284
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46917)
CVE-2026-46917
CWE-284
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47638)
CVE-2026-47638
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47640)
CVE-2026-47640
CWE-707
Medium
Joomla CVE-2026-48900 Vulnerability (CVE-2026-48900)
CVE-2026-48900
-
Medium
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
CVE-2026-47778
CWE-158
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48588)
CVE-2026-48588
CWE-524
Medium
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
CVE-2026-48587
CWE-1023
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48562)
CVE-2026-48562
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2026-48125)
CVE-2026-48125
CWE-400
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
Envoy Proxy Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-47775)
CVE-2026-47775
CWE-209
Medium
SharePoint CVE-2026-47641 Vulnerability (CVE-2026-47641)
CVE-2026-47641
-
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47761)
CVE-2026-47761
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760)
CVE-2026-47760
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47759)
CVE-2026-47759
CWE-707
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-47729)
CVE-2026-47729
CWE-125
Medium
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
CVE-2026-47692
CWE-130
Medium
Chamilo Missing Authorization Vulnerability (CVE-2026-33708)
CVE-2026-33708
CWE-862
Medium
Apache httpOnly cookie disclosure
CVE-2012-0053
CWE-200
Medium
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-26047)
CVE-2026-26047
CWE-770
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3836)
CVE-2014-3836
CWE-352
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3680)
CVE-2014-3680
CWE-200
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3681)
CVE-2014-3681
CWE-707
Medium
PHP Improper Input Validation Vulnerability (CVE-2014-3710)
CVE-2014-3710
CWE-20
Medium
Django Improper Input Validation Vulnerability (CVE-2014-3730)
CVE-2014-3730
CWE-20
Medium
Dotclear Improper Authentication Vulnerability (CVE-2014-3781)
CVE-2014-3781
CWE-287
Medium
Dotclear Other Vulnerability (CVE-2014-3782)
CVE-2014-3782
-
Medium
Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783)
CVE-2014-3783
CWE-138
Medium
Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3810)
CVE-2014-3810
CWE-138
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3826)
CVE-2014-3826
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3827)
CVE-2014-3827
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3832)
CVE-2014-3832
CWE-707
Medium
ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3833)
CVE-2014-3833
CWE-707
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3835)
CVE-2014-3835
CWE-264
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3837)
CVE-2014-3837
CWE-264
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3668)
CVE-2014-3668
CWE-119
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3838)
CVE-2014-3838
CWE-264
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3900)
CVE-2014-3900
CWE-707
Medium
Ruby on Rails Data Processing Errors Vulnerability (CVE-2014-3916)
CVE-2014-3916
-
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2014-3941)
CVE-2014-3941
CWE-20
Medium
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3942)
CVE-2014-3942
CWE-94
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2014-3944)
CVE-2014-3944
CWE-287
Medium
TYPO3 Improper Authentication Vulnerability (CVE-2014-3945)
CVE-2014-3945
CWE-287
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3946)
CVE-2014-3946
CWE-200
Medium
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3963)
CVE-2014-3963
CWE-264
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2014-3971)
CVE-2014-3971
CWE-20
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3991)
CVE-2014-3991
CWE-707
Medium
Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3992)
CVE-2014-3992
CWE-138
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4049)
CVE-2014-4049
CWE-119
Medium
ASP.NET MVC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4075)
CVE-2014-4075
CWE-707
Medium
PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3670)
CVE-2014-3670
CWE-119
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3667)
CVE-2014-3667
CWE-200
Medium
MySQL CVE-2014-4207 Vulnerability (CVE-2014-4207)
CVE-2014-4207
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3568)
CVE-2014-3568
-
Medium
Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)
CVE-2014-3518
CWE-94
Medium
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-3523)
CVE-2014-3523
-
Medium
PHP Resource Management Errors Vulnerability (CVE-2014-3538)
CVE-2014-3538
-
Medium