Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Missing Update

This page lists 23821 vulnerabilities in this category.

Critical: 1574 High: 12741 Medium: 8710 Low: 792 Information: 4
Vulnerability Name
CVE
CWE
Severity
Varnish Cache Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4484)
CVE-2013-4484
CWE-119
Medium
Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4491)
CVE-2013-4491
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4522)
CVE-2013-4522
CWE-200
Medium
Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-4524)
CVE-2013-4524
CWE-22
Medium
Lighttpd Use After Free Vulnerability (CVE-2013-4560)
CVE-2013-4560
CWE-416
Medium
MediaWiki Other Vulnerability (CVE-2013-4567)
CVE-2013-4567
-
Medium
MediaWiki Other Vulnerability (CVE-2013-4568)
CVE-2013-4568
-
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4569)
CVE-2013-4569
CWE-200
Medium
MediaWiki Other Vulnerability (CVE-2013-4570)
CVE-2013-4570
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4573)
CVE-2013-4573
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4574)
CVE-2013-4574
CWE-707
Medium
Oracle JRE Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2013-4578)
CVE-2013-4578
CWE-138
Medium
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4590)
CVE-2013-4590
CWE-200
Medium
PHP Numeric Errors Vulnerability (CVE-2013-4635)
CVE-2013-4635
-
Medium
MongoDb Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4650)
CVE-2013-4650
CWE-264
Medium
Ruby on Rails Use of Externally-Controlled Format String Vulnerability (CVE-2013-4389)
CVE-2013-4389
CWE-134
Medium
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4729)
CVE-2013-4729
CWE-264
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4791)
CVE-2013-4791
CWE-707
Medium
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4792)
CVE-2013-4792
CWE-352
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4938)
CVE-2013-4938
CWE-264
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4939)
CVE-2013-4939
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4939)
CVE-2013-4939
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4940)
CVE-2013-4940
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4940)
CVE-2013-4940
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4941)
CVE-2013-4941
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4941)
CVE-2013-4941
CWE-707
Medium
YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4942)
CVE-2013-4942
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4942)
CVE-2013-4942
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4996)
CVE-2013-4996
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4997)
CVE-2013-4997
CWE-707
Medium
Apache Tomcat Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4444)
CVE-2013-4444
CWE-94
Medium
RubyGems Cryptographic Issues Vulnerability (CVE-2013-4363)
CVE-2013-4363
-
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4191)
CVE-2013-4191
CWE-264
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-4286)
CVE-2013-4286
CWE-20
Medium
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4192)
CVE-2013-4192
CWE-20
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4193)
CVE-2013-4193
CWE-264
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4194)
CVE-2013-4194
CWE-200
Medium
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4195)
CVE-2013-4195
CWE-20
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4196)
CVE-2013-4196
CWE-264
Medium
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4197)
CVE-2013-4197
CWE-20
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4198)
CVE-2013-4198
CWE-264
Medium
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4200)
CVE-2013-4200
CWE-264
Medium
Jboss EAP CVE-2013-4210 Vulnerability (CVE-2013-4210)
CVE-2013-4210
-
Medium
Jboss EAP Improper Access Control Vulnerability (CVE-2013-4213)
CVE-2013-4213
CWE-284
Medium
Python Improper Input Validation Vulnerability (CVE-2013-4238)
CVE-2013-4238
CWE-20
Medium
PHP Improper Input Validation Vulnerability (CVE-2013-4248)
CVE-2013-4248
CWE-20
Medium
Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4249)
CVE-2013-4249
CWE-707
Medium
TYPO3 Improper Input Validation Vulnerability (CVE-2013-4250)
CVE-2013-4250
CWE-20
Medium
Ruby Cryptographic Issues Vulnerability (CVE-2013-4287)
CVE-2013-4287
-
Medium
Ruby Cryptographic Issues Vulnerability (CVE-2013-4363)
CVE-2013-4363
-
Medium
RubyGems Cryptographic Issues Vulnerability (CVE-2013-4287)
CVE-2013-4287
-
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4301)
CVE-2013-4301
CWE-200
Medium
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4302)
CVE-2013-4302
CWE-264
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4303)
CVE-2013-4303
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4305)
CVE-2013-4305
CWE-707
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)
CVE-2013-4306
CWE-352
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4307)
CVE-2013-4307
CWE-707
Medium
Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2013-4315)
CVE-2013-4315
CWE-22
Medium
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4320)
CVE-2013-4320
CWE-264
Medium
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4321)
CVE-2013-4321
CWE-94
Medium
Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-4322)
CVE-2013-4322
CWE-20
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4341)
CVE-2013-4341
CWE-707
Medium
Apache HTTP Server Other Vulnerability (CVE-2013-4352)
CVE-2013-4352
-
Medium
OpenSSL Improper Input Validation Vulnerability (CVE-2013-4353)
CVE-2013-4353
CWE-20
Medium
Oracle HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3195)
CVE-2015-3195
CWE-200
Medium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3196)
CVE-2015-3196
CWE-362
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5481)
CVE-2012-5481
CWE-264
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-20036)
CVE-2017-20036
CWE-707
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1570)
CVE-2017-1570
CWE-200
Medium
IBM RTC Files or Directories Accessible to External Parties Vulnerability (CVE-2017-1602)
CVE-2017-1602
CWE-552
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1629)
CVE-2017-1629
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1653)
CVE-2017-1653
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1655)
CVE-2017-1655
CWE-707
Medium
IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700)
CVE-2017-1700
CWE-863
Medium
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1725)
CVE-2017-1725
CWE-200
Medium